SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Consensys is the leading blockchain and web3 software company, building products and infrastructure that enable users, developers, and institutions to participate in the decentralized web. MetaMask, their flagship product, serves over 30 million monthly active users as a cryptographic key manager, decentralized application development platform, and identity manager.
The Senior Application Security Engineer will join Consensys's rapidly growing security team to embed security throughout the software development lifecycle. Working closely with development teams and product managers, you'll ensure MetaMask and other Consensys products meet the highest security standards. The role primarily supports MetaMask with opportunities to expand across the broader Consensys product family.
Key responsibilities include performing threat modeling and security design reviews, conducting vulnerability assessments, collaborating with engineers to identify and remediate security issues, and building secure solutions. You'll focus on securing modern backend systems, web applications, APIs, and JavaScript-based applications (Node.js, React, React Native). Given MetaMask's role managing user digital assets and identities, security is paramount.
Required qualifications: 6+ years building and securing software with hands-on product/application security experience; expertise securing modern backend systems, web applications, and APIs; proficiency in threat modeling, security design reviews, and vulnerability assessment; experience with JavaScript-based applications across web and mobile platforms; strong coding skills to work directly with engineers; familiarity with blockchain technology, Ethereum, decentralized applications, and crypto wallets; solid understanding of modern web and mobile security landscapes including attack vectors and mitigations.
This is a fully remote position open to candidates in the US and EMEA regions, offering the opportunity to work with a globally distributed team of technologists, cryptographers, and builders at the forefront of web3 innovation.
