Senior Application Security Engineer
Core
Embed security into all phases of the software development lifecycle for MetaMask, a crypto wallet and gateway to the decentralized web, serving tens of millions of users.
Role type
Senior Application Security Engineer (Web3/Blockchain)
Builds
Secure software for MetaMask client applications and infrastructure used by millions of users and developers.
Domain
Web3, Blockchain, Cryptocurrency, Decentralized Applications (dApps)
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Application security, Threat modelling, Vulnerability assessment, JavaScript security (Node.js, React, React Native), Backend security, API security, Blockchain/Ethereum knowledge, Secure software development lifecycle (SSDLC)
Preferred skills
Software development experience, Smart contract security, AI tooling for vulnerability detection
Technologies
Node.js, React, React Native, Ethereum, AI tooling
Responsibilities
Determine root cause and severity of vulnerabilities from bug bounty reports; Interface with ethical hackers and guide engineering teams to resolution; Write code to fix vulnerabilities or develop security engineering projects; Conduct design reviews, threat modeling, security testing, and code reviews; Identify gaps in SSDLC and lead remediation efforts; Validate security patches and test for bypasses; Develop automation and security controls to prevent future vulnerabilities.
Seniority
Senior, hands-on IC