Consensys

Senior Application Security Engineer

Remote Office of the CSO role with clear candidate location fit.

PostedRecently added

Eligible countries60 accepted countries

Seniority signalSenior

Work settingRemote

Accepted candidate locations

AlbaniaAlgeriaAustriaBahrainBelgiumBotswana+54 more

JavaScript Node.js React

Can I actually apply?Check country list

Accepted candidate countries are listed (60).

Source freshnessRecently added

Location fit60 accepted countries

Stack matchJavaScript, Node.js

Apply pathCompany site

Mira fit summaryWhy this role is worth checking

Location fit60 accepted countriesAdd your country

Stack matchAdd profile skills to compareJavaScript, Node.js

Seniority signalSeniorSet your level for a sharper check.

Apply readinessCompany siteApplication continues on the company site.

Application

Apply on company site

External apply

Applying forSenior Application Security EngineerConsensys

Country fit60 accepted countries

Apply pathCompany site

WithMiraSave or subscribe before leaving

Company application

WithMira keeps this role for discovery. The application continues on the company site.

Apply on company site

Save role

Role overview

Senior Application Security Engineer

Requirements and responsibilities

Readable role content extracted into sections for faster review.

Details

6+ years of experience building and securing software, including hands-on product or application security experience.
Experience securing modern backend systems, web applications, and APIs.
Experience performing threat modelling, security design reviews, and vulnerability assessment.
Experience securing JavaScript-based applications across web and/or mobile (Node.js, React, React Native preferred).
Strong coding skills, with the ability to work directly with engineers to identify and fix vulnerabilities or build secure solutions.
Familiarity with Blockchain technology (particularly Ethereum), Decentralized Applications and crypto wallets
Solid understanding of the modern web and mobile security landscape, including common attack vectors and mitigations.
Strong communication skills, with the ability to influence engineering decisions and collaborate effectively in a remote environment.
Self-driven and proactive, comfortable operating in a high-autonomy, distributed team.
Alignment with our mission and values.
Experience working as a software developer.
Deep knowledge of Ethereum (and other blockchains), Decentralized Applications and crypto wallets.
Knowledge of smart contract implementation and security.
You’re a MetaMask user!
Determine the root cause and severity of vulnerabilities reported to us through our bug bounty platform.
Interface with ethical hackers, triage reports, and guide product engineering teams to resolution.
Document identified vulnerabilities in a way that allows for our engineering team to take quick action.
Write code to support the development of security engineering projects, or fix vulnerabilities in MetaMask client applications. This includes the development of AI tooling for vulnerability determination and resolution in order to keep pace with the changing AI-powered vulnerability detection landscape.
Assess potential security vulnerabilities within our applications, and work with development teams to ensure remediation in our established SLAs.
Support product teams as they develop new features by conducting design reviews, threat modeling, security testing, and code reviews.
Identify gaps in MetaMask’s secure software development life cycle (SSDLC), and take initiative leading efforts to address them.
Participate and contribute to team meetings, roadmap planning, and discussions.
Validate that security patches address reported vulnerabilities and test for any potential bypasses
Proactively prevent future occurrences of a vulnerability through developing automation, security controls, and educating developers.
Pave your own path in how you want to make MetaMask more secure.