Winternship Opportunities

Trail of Bits offers unique remote, short-term internship opportunities called “Winternships” (Winter Internships). Winternships generally happen over your University’s winter break. You can get paid (~$2500) to work on a project that excites you and still spend time with your friends and family.


  • You must have at least 3 weeks of time available to dedicate to the project.
  • You should have the legal right to work in the United States now or by the time you graduate.
  • We prefer students pursuing studies in engineering or computer science.

Example Projects

  • DeepState: Help us build out our symbolic C++ unit testing framework.
    • Required skills: Proficient in C++, knowledgeable in Python and Symbolic Execution.
  • Challenge Set Live Eval System: Build a system that tests fuzzers and symbolic execution tools against the challenge sets.
    • Required skills: Knowledgeable in Python and DevOps.
  • Manticore EVM: Help extend Manticore’s Ethereum VM (EVM) support.
    • Required skills: Knowledgeable in Python.
  • Slither: Help extend our Solidity Static Analyzer
    • Required skills: Knowledgeable in Python and Static Analysis/Formal Methods.
  • McSema: Help us improve McSema, our binary translator
    • Required skills: C++, x86, or arm
  • McSema libfuzzer / afl / asan: Figure out what’s required to use libfuzzer, afl, or asan on McSema lifted bitcode and make the changes.
    • Required skills: Knowledgable in C++.
  • checksec for 2017: Update to detect mitigations introduced since 2011
    • Required skills: bash
  • Propose your own project!

Project Requirements

  • Projects must be short-term and achievable.
  • Projects must be cybersecurity-focused.
  • Open source projects must be licensed with a permissive license (e.g., Apache2).
  • Projects must be hosted on the Trail of Bits Github organization.

Collaboration and Mentorship

Trail of Bits takes advantage of the latest technology to get work done. Winternships will be organized and tracked through Slack, Google Meet, and Github. Projects will have a schedule, project inception, and project debrief. At the completion of your project you will work with our copywriter to publish an end-of-winternship blog post.


If you’re interested, submit your resume and a little bit about the project you’d like to work on using (position closed!). Please also consider applying for our Summer 2019 internship program!