RemoteLeaf Logo
Log in Sign up

Senior Application Security Engineer

5 months ago
Europe, United States
Full-time
Senior
Application Security Engineer
Cybersecurity
Blockchain Ethereum JavaScript Node.js React React Native
Apply Now
Consensys

Consensys

Consensys is a blockchain software company providing trusted web3 products. MetaMask, their flagship self-custodial wallet, serves over 100 million users for identity, asset management, and web3 exploration.

Internet Software & Services
251-1K
Founded 2014
$725M raised
View All Jobs 4

Description

  • Determine the root cause and severity of vulnerabilities reported through the bug bounty platform.
  • Interface with ethical hackers, triage vulnerability reports, and guide engineering teams to resolution.
  • Document vulnerabilities clearly so engineering teams can act quickly.
  • Write code to support security engineering projects and fix vulnerabilities in MetaMask client applications.
  • Develop AI tooling to help determine and resolve vulnerabilities.
  • Assess security risks in applications and ensure remediation within established SLAs.
  • Support new feature development through design reviews, threat modeling, security testing, and code reviews.
  • Identify gaps in the secure software development lifecycle and lead efforts to address them.
  • Validate that security patches fully address reported vulnerabilities and check for bypasses.
  • Build automation, security controls, and developer education to prevent future vulnerabilities.

Requirements

  • 6+ years of experience building and securing software, including hands-on product or application security experience.
  • Experience securing modern backend systems, web applications, and APIs.
  • Experience performing threat modeling, security design reviews, and vulnerability assessment.
  • Experience securing JavaScript-based applications across web and/or mobile; Node.js, React, and React Native are preferred.
  • Strong coding skills with the ability to work directly with engineers to identify and fix vulnerabilities or build secure solutions.
  • Strong understanding of modern web and mobile security, including common attack vectors and mitigations.
  • Strong communication skills and the ability to influence engineering decisions in a remote environment.
  • Self-driven and proactive, with comfort operating in a high-autonomy, distributed team.
  • Alignment with Consensys’s mission and values.
  • Experience working as a software developer is preferred.
  • Familiarity with the Ethereum blockchain and decentralized applications is preferred.
  • Must be able to overlap with EU and US-Pacific time zones as needed.
  • Applicants must be willing to undergo background checks, including employment, education, and criminal record checks.

Benefits

  • US base salary range of $130,000 to $218,000, not including bonus, equity, or other benefits.
  • Remote-friendly work environment with distributed collaboration.
  • Opportunities for career growth and learning within MetaMask and Consensys.
  • High trust and autonomy in day-to-day work.
  • Exposure to new concepts, ideas, and frameworks across different projects.
  • Opportunity to contribute to products supporting one billion participants and 5 million developers.
  • Potential for bonus, equity, and other benefits.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Modern Health

Product Security Engineer

Modern Health 251-1K Health Care Providers & Services

Modern Health is hiring a remote Product Security Engineer to strengthen security and compliance across its mental health platform, applications, cloud infrastructure, and software development lifecycle.

United States Full-time Junior Application Security Engineer
$101k-$140k
Agile AWS Bash CI/CD Cybersecurity Datadog Django Flask GitLab HashiCorp Vault Packer Penetration Testing PostgreSQL Python Redis Terraform
1 day, 4 hours ago
B

Application Security Engineer - Senior

Banco Plata, S.A., Institución de Banca Múltiple. 1001-5000 Banking / financial services

Plata is seeking an Application Security Engineer to join its Information Security team and embed security controls, testing, and practices throughout the software development lifecycle.

Anywhere Full-time Senior Application Security Engineer
Burp Suite CI/CD Kubernetes Microservices OWASP Penetration Testing
3 days, 4 hours ago
payabl.

Senior Product Security Engineer

payabl. 51-250 Diversified Financial Services

Payabl is seeking a Senior Product Security Engineer to establish and embed product security across its payments engineering organization, integrating secure practices throughout the software development lifecycle.

Poland Portugal Full-time Senior Application Security Engineer
AWS CI/CD Penetration Testing
3 days, 5 hours ago
I

Senior Product Security Engineer (Contract)

Iru Enterprise IT, cybersecurity, identity/security, endpoint management, compliance software

Iru is seeking a Senior Product Security Engineer for a 6-month, 40-hour-per-week contract to embed security throughout the software development lifecycle and help teams build secure-by-design products.

United States Contract Senior Application Security Engineer
AWS Azure GCP GitHub Actions Kubernetes Microservices OAuth OpenID Connect
5 days, 4 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers