Senior Application Security Engineer
Core
Embed security into all phases of the software development lifecycle for MetaMask, a crypto wallet and gateway to the decentralized web, serving tens of millions of users.
Role type
Senior Application Security Engineer
Builds
Secure software solutions and AI tooling for vulnerability detection for MetaMask and Consensys products
Domain
Web3 / Blockchain / Cryptocurrency
Deliverable
production ML models | product features
Required skills
Threat modelling, security design reviews, vulnerability assessment, JavaScript security (Node.js, React, React Native), modern web/mobile security landscape, coding to fix vulnerabilities, blockchain technology familiarity
Preferred skills
Software development experience, deep Ethereum knowledge, smart contract security knowledge
Technologies
Node.js, React, React Native, Ethereum
Responsibilities
Determine root cause and severity of vulnerabilities from bug bounty platform, interface with ethical hackers and guide engineering teams to resolution, document vulnerabilities for quick action, write code to support security projects and fix vulnerabilities, assess potential security vulnerabilities and ensure remediation, conduct design reviews, threat modeling, security testing, and code reviews, identify gaps in SSDLC and lead efforts to address them, validate security patches and test for bypasses, proactively prevent future vulnerabilities through automation and controls
Seniority
Senior, hands-on IC