Open Source Security Researcher - Remote

Overview

TruffleHog is a popular open source tool used by security researchers all over the world to find leaky API keys and responsibly disclose them to affected companies. This provides income through bug bounty platforms like HackerOne to individuals that may otherwise have a hard time finding employment. This also prevents breaches from occurring, which can be very costly for companies to resolve.

When we founded Truffle Security Co. in February of 2021, we committed to continue to grow a community with security researchers around the world, and continue to provide free and open resources to support those that make the world more secure. We have a strong commitment to open source and to the community. We’re looking for help supporting our mission to prevent leaking credentials and build the best products for machine identity protection.

At Truffle, you’ll have the opportunity to join a fully remote, collaborative team contributing to meaningful advancements in cybersecurity.

In Short

• Spearhead open-source security research projects.
• Share findings via blog posts, videos, webinars, and conference talks.
• Conduct cutting-edge open-source security research.
• Create engaging content to showcase research findings.
• Present at conferences and industry events.
• Build Proof-of-Concept tools for research.
• Contribute to Truffle Security’s Open-Source Tools.
• Serve as a security subject matter expert for engineering.
• Maintain a positive and ethical attitude in all interactions.

Requirements

• Proven background in security research.
• Expertise in application security and one other information security domain.
• Excellent technical writing skills.
• History of public speaking on security topics.
• Intermediate programming skills, primarily in Python and Golang.
• Familiarity with LLM tools.
• Strong collaboration abilities.
• Ability to juggle multiple long-term research projects.
• High ethical standards and integrity.
• Attention to detail.

Benefits

• A culture of mentorship, equity, and psychological safety.
• Competitive salary and meaningful equity.
• Flexible paid time off.
• 14 paid holidays.
• Comprehensive health benefits.
• Remote work stipend.
• Health & wellness stipend.
• Learning & development stipend.
• 401(k) match.
• 100% remote + company off-sites.