Senior Application Security Engineer

About the role

MetaMask is a crypto wallet and gateway to the decentralized web. ConsenSys is building Open Money with a remote-first, global team. This role owns embedding security across the software development lifecycle for MetaMask and related products.

What you'll do

• Determine root cause and severity of vulnerabilities reported through our bug bounty program, triage with ethical hackers, and guide product engineering to resolution.
• Document vulnerabilities clearly so the engineering team can take quick action.
• Write code to support security engineering projects or fix vulnerabilities in MetaMask client applications, including developing AI tooling for vulnerability determination and resolution.
• Assess potential security vulnerabilities within our applications and work with development teams to ensure remediation within SLAs.
• Lead security reviews, threat modeling, security testing, and code reviews for new features and identify SSDLC gaps to drive improvements.

What they're looking for

• 6+ years of experience building and securing software, including hands-on security work.
• Experience securing modern backend systems, web applications, and APIs.
• Experience performing threat modeling, security design reviews, and vulnerability assessments.
• Strong coding skills and ability to work directly with engineers to identify and fix vulnerabilities or build secure solutions.
• Familiarity with Blockchain technology, Ethereum, Decentralized Applications and crypto wallets.

For applicants in Nigeria

• The listing states worldwide eligibility but excludes candidates based in France, Italy, or Germany; Nigeria is not excluded, so applicants in Nigeria are eligible to apply.
• Timezone: Most timezones will work; some overlap with EU and US-Pacific time zones will be necessary. The listing does not state a Nigeria-specific timezone requirement; confirm during interviews.
• Contractor vs employee: The posting describes employment with standard background checks; it does not specify contractor status.
• Pay currency/range: The listing shows a US pay range of $130,000 to $218,000 USD; for non-US candidates, compensation will be determined during the interview process and may differ.
• Visa or work authorization: The listing does not mention visa or work-authorization requirements.