<div dir="ltr">







<p class=""><span class="">Trail of Bits[1] is looking to expand our engineering team. We’re looking for engineers interested in software security, experience with LLVM pass development, and a strong grasp of C++. </span></p><p class=""><span class="">We’re working on several funded research projects that utilize LLVM to do program analysis and transformation. One such project is mcsema[2][3]. The cliff notes on mcsema are: it’s an x86 binary to LLVM IR translation framework where the output is well formed IR (compatible with llc and opt). You can even feed mcsema’s output straight into klee[4][5].</span></p><p class=""><span class="">We’re currently doing work with LLVM in the following topic areas:<br></span>•<span class="">       </span>Further mcsema development (including expanding it to support x86-64)<br>•<span class="">  </span>Automatic software vulnerability detection & mitigation<br>•<span class="">    </span>Automatic proof of vulnerability development[6]<br>•<span class="">        </span>Software obfuscation and anti-reverse-engineering<br>•<span class="">      </span>Software security through diversity</p>
<p class=""><span class="">We’re looking for software engineers with the following qualifications:<br></span>•<span class="">   </span>Experience implementing LLVM Analysis passes<br>•<span class="">   </span>Experience with static and dynamic program analysis techniques<br>•<span class=""> </span>Strong C++ programming skills<br>•<span class="">  </span>An understanding of software security flaws is a plus</p>
<p class=""><span class="">A lot of our work revolves around software security but it certainly isn’t limited to it. Don’t let this discourage you from applying!</span></p>
<p class=""><span class="">If any of this work interests you or if you’re looking for new challenges, please apply by sending your resume to <a href="mailto:careers@trailofbits.com"><span class="">careers@trailofbits.com</span></a>. More information about our company is available here: <a href="https://www.trailofbits.com/careers/"><span class="">https://www.trailofbits.com/careers/</span></a>.</span></p>
<p class="">Cheers,<br>Ryan</p>
<p class=""><span class="">[1] <span class=""><a href="https://www.trailofbits.com/">https://www.trailofbits.com</a><br></span></span>[2] <span class=""><a href="https://github.com/trailofbits/mcsema">https://github.com/trailofbits/mcsema</a><br></span>[3] <span class=""><a href="http://recon.cx/2014/video/recon2014-10-artem-dinaburg-andrew-ruef-Static-Translation-of-X86-Instruction-Semantics-to-LLVM-With-McSema.mp4">http://recon.cx/2014/video/recon2014-10-artem-dinaburg-andrew-ruef-Static-Translation-of-X86-Instruction-Semantics-to-LLVM-With-McSema.mp4</a><br></span>[4] <span class=""><a href="http://blog.trailofbits.com/2014/11/25/close-encounters-with-symbolic-execution/">http://blog.trailofbits.com/2014/11/25/close-encounters-with-symbolic-execution/</a><br></span>[5] <span class=""><a href="http://blog.trailofbits.com/2014/12/04/close-encounters-with-symbolic-execution-part-2/">http://blog.trailofbits.com/2014/12/04/close-encounters-with-symbolic-execution-part-2/</a><br></span>[6] As part of DARPA’s Cyber Grand Challenge: <a href="http://blog.trailofbits.com/2014/06/03/dear-darpa-challenge-accepted/"><span class="">http://blog.trailofbits.com/2014/06/03/dear-darpa-challenge-accepted/</span></a></p></div>