About us

TruffleHog is a popular open source tool used by security researchers all over the world to find leaky API keys and responsibly disclose them to affected companies. This provides income through bug bounty platforms like HackerOne to individuals that may otherwise have a hard time finding employment. This also prevents breaches from occurring, which can be very costly for companies to resolve.

When we founded Truffle Security Co in February of 2021, we committed to continue to grow a community with security researchers around the world, and continue to provide free and open resources to support those that make the world more secure. We have a strong commitment to open source and to the community. We’re looking for help supporting our mission to prevent leaking credentials and build the best products for machine identity protection.

At Truffle Security, you’ll have the opportunity to join a fully remote, collaborative team contributing to meaningful advancements in cybersecurity.

About the role

We’re looking for a Senior Backend Engineer with experience in Go, gRPC, Kubernetes (K8s), and APIs to help enhance our core product features. In this role, you’ll contribute to the development of our scanner and its API, leveraging our advanced infrastructure, that includes CI with tests, benchmarking, fuzzing, isolated live development deployments, and automated production releases.

What youll be working on

Develop backend components using Go
Work with gRPC clients and servers
Designing and implementing APIs, as well as utilizing existing internal and external APIs
Contribute to the open-source development of our core product features
Engage in continuous learning and skill development on the job

What were looking for

5+ years of experience in backend development.
A strong sense of ownership demonstrated through delivering production-quality code with robust testing, monitoring, and documentation.
Excited about working in a small company with opportunities for ownership.
Experienced in shipping products and delivering solutions based on customer feedback.
Good intuition of practical performance considerations when handling data.
Eager to learn continuously; we don’t expect you to know everything from the start.
Interest in creating a delightful developer experience.

Bonus points

Passion for open source and cybersecurity is a plus!
Experience working at an early-stage startup.

Salary range: The target salary range for this position is between $156,000 - $184,000 for Senior Software Engineers. Starting salary will vary based on job-related skills, knowledge, and experience. Leveling will be determined during the interview process. You may also be offered a bonus, stock options, and benefits. These salary ranges are subject to change, and we encourage candidates outside of this salary range to apply.

How we support our team

Commitment to building a culture of mentorship, equity, and psychological safety
Competitive compensation and equity package
401(k) with 6% company match
Flexible paid time off
- We ask employees to take 3 weeks off to recharge
- Thanksgiving & Winter holiday shutdown
- We have holidays, as well as Truffle Holidays where the entire company takes a day off
Medical, dental, and vision coverage
- 80% Premium coverage for employees & their dependents
Remote work stipend
- $800 new hire stipend, and $100/monthly thereafter. We want you to be comfortable working remotely.
Health & wellness stipend
- $1,200/year. Maintaining your physical, mental, and emotional well-being is foundational to doing your best work
Learning & development stipend
- $2,000/year. Adopting a growth-mindset allows you to grow professionally and personally.
Company off-sites!
- We’re 100% remote with no office, but won’t let that stop us from working closely together. Destinations have included Hawaii, Cabo, Chicago, Savannah, and the Rocky Mountains.

We’re looking for folks who are interested in being part of the journey to make the internet more secure. The internet is for all, and we believe that diverse experiences and people from all walks of life can contribute to this mission. That said, if what we’re doing resonates with your values, we’d love to have you apply even if you don’t check all of the boxes or match the job description to a tee.

Truffle strives to promote an equitable, inclusive, and psychologically-safe workplace for all who are interested in working with us. All job applicants will be considered throughout the employment process without regard to race, color, ethnicity, religion, sex, sexual orientation, gender perception/identity, age, pregnancy or parental status, disability status, or any other basis prohibited by law. If you are an individual with disabilities and reasonable accommodation is needed throughout the interview process, or to perform essential job functions, please let your recruiter know.

Lastly, we ask that all applicants consider the opportunity to answer a few voluntary demographic questions on the job application. This helps us track the inclusivity of our recruiting initiatives. Answering these questions is entirely optional and your answers will not be shared with the hiring team and will not impact the hiring decision.

Note: Our organization participates in the US federal E-Verify program. We will provide the Social Security Administration, and if necessary, the Department of Homeland Security, with information from each new employee’s Form I-9 to confirm work authorization. We do not use this information to pre-screen job applicants.