Senior Application Security Engineer

Job not on LinkedIn

🕒 August 10

🇺🇸 United States – Remote

💵 $130k - $218k / year

⏰ Full Time

🟠 Senior

💻 Application Engineer

👻 Ghost score 1%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

MetaMask

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2016

₿ Crypto

🌐 Web 3

💳 Fintech

Crypto • Web 3 • Fintech

MetaMask is a leading self-custodial crypto wallet that serves as a gateway to blockchain applications. Available as a browser extension and mobile app, it enables users to track and manage their web3 assets securely and conveniently. With features such as buying, selling, staking, and bridging crypto tokens, MetaMask empowers over 100 million users worldwide to control their digital assets and interact on the decentralized web with privacy and security.

📋 Description

• Determine the root cause and severity of vulnerabilities reported through the bug bounty platform • Interface with ethical hackers, triage reports, and guide product engineering teams toward resolution • Document vulnerabilities so engineering teams can take quick action • Write code for security engineering projects and fix vulnerabilities in MetaMask client applications • Develop AI tooling for vulnerability determination and resolution • Assess application vulnerabilities and ensure remediation within established SLAs • Conduct design reviews, threat modeling, security testing, and code reviews • Identify gaps in MetaMask’s secure software development life cycle and lead efforts to address them • Participate in team meetings, roadmap planning, and discussions • Validate security patches and test for potential bypasses • Develop automation and security controls to prevent recurring vulnerabilities • Educate developers on security practices • Help determine how to make MetaMask more secure

🎯 Requirements

• 6+ years of experience building and securing software, including hands-on product or application security experience • Experience securing modern backend systems, web applications, and APIs • Experience performing threat modelling, security design reviews, and vulnerability assessment • Experience securing JavaScript-based applications across web and/or mobile • Strong coding skills and ability to identify and fix vulnerabilities or build secure solutions • Familiarity with blockchain technology, particularly Ethereum, decentralized applications, and crypto wallets • Solid understanding of modern web and mobile security, common attack vectors, and mitigations • Strong communication skills and ability to influence engineering decisions and collaborate in a remote environment • Self-driven and proactive; comfortable operating in a high-autonomy, distributed team • Alignment with Consensys’s mission and values • Some overlap with EU and US-Pacific time zones required • Employment background checks, including employment, education, and criminal record checks, are required • Nice to have: software development experience • Nice to have: deep knowledge of Ethereum and other blockchains, decentralized applications, and crypto wallets • Nice to have: smart contract implementation and security knowledge • Nice to have: MetaMask user

🏖️ Benefits

• Fully remote work arrangement • Globally distributed team environment • Opportunities to work with emerging technologies and complex challenges • Exposure to new ideas and technologies • Equal opportunity employer • US salary range excludes bonus, equity, and other benefits; compensation outside the US is determined based on location, experience, and skills