Senior Application Security Engineer

Consensys is a leading blockchain and web3 software company dedicated to building the infrastructure for a decentralized internet. We are looking for a Senior Application Security Engineer to join our team and help ensure the security of MetaMask, a platform trusted by millions of users worldwide.

Key responsibilities

• Determine the root cause and severity of vulnerabilities reported through our bug bounty platform.
• Interface with ethical hackers and guide product engineering teams toward effective resolutions.
• Conduct design reviews, threat modeling, and security testing to support new feature development.
• Write code to fix vulnerabilities and develop security engineering projects, including AI-powered tooling.
• Identify gaps in the secure software development life cycle and lead initiatives to address them.

Requirements

• 6+ years of experience in product or application security, including securing backend systems and APIs.
• Strong coding skills with experience securing JavaScript-based applications (Node.js, React, React Native).
• Solid understanding of the modern web and mobile security landscape and common attack vectors.
• Familiarity with blockchain technology, decentralized applications, and crypto wallets.
• Excellent communication skills with the ability to influence engineering decisions in a remote environment.

What we offer

• The opportunity to work on industry-leading products used by millions of global users.
• A fully remote, globally distributed team environment that fosters innovation and professional growth.
• Exposure to complex challenges and emerging technologies within the web3 ecosystem.
• A collaborative culture that values diverse perspectives and encourages proactive problem-solving.