Senior Application Security Engineer

About Consensys

Consensys is the leading blockchain and web3 software company founded by Joe Lubin. Since 2014, Consensys has been at the forefront of innovation, pioneering technological developments within the web3 ecosystem.

Through our product suite, including the Meta Mask platform, Infura, Linea, Diligence, and our NFT toolkit Phosphor, we have become the trusted collaborator for users, creators, and developers on their path to build and belong in the world they want to see.

Whether building a dapp, an NFT collection, a portfolio, or a better future, the instinct to build is universal. Consensys inspires and champions the builder instinct in everyone by making web3 universally easy to use and develop on.

Our mission is to unlock the collaborative power of communities by making the decentralized web universally easy to access, use, and build on.

You’ll get to work on the tools, infrastructure, and apps that scale these platforms to onboard one billion participants and 5 million developers. You’ll be constantly exposed to new concepts, ideas, and frameworks from your peers, and as you work on different projects — challenging you to stay at the top of your game. You’ll join a network of builders that reaches the edge of our ecosystem.

Consensys alumni have moved on to become tech entrepreneurs, CEOs, and team leads at tech companies.

Meta Mask aims to create a thriving engineering organization that supports the well‑being of our engineers while empowering them to do work they are proud of and enjoy. We strive for an environment that gives our people high trust and autonomy, while also facilitating collaboration, communication and camaraderie among teams and teammates. We aspire to build a diverse engineering team, inclusive to people from all backgrounds and demographics.

It is also of great importance to us that working at Meta Mask is an experience that catalyzes career growth and learning.

Meta Mask has experienced explosive user growth over the past year as a cryptographic key manager and web3 application development platform. As this user base continues to grow, an immense amount of trust is being placed in Meta Mask as a tool that manages and wields their digital authority, controlling assets, identities and more. It is of highest importance to us that we keep our users as safe and secure as possible.

We are looking for a Senior Application Security Engineer to join our rapidly growing security team to help embed security into all phases of the software development lifecycle. You will work closely with development teams and product managers to ensure Meta Mask products are designed and implemented to the highest security standards. Consenys’ application security team primarily supports Meta Mask with opportunities to expand to additional products in the Consensys family.

• 6+ years of experience building and securing software, with at least 4 years in a product security or application security role.
• Experience securing server‑side applications and environments.
• Experience performing security design reviews, threat modeling, or security testing.
• Experience working with or securing JavaScript/Node.js applications in modern web environments.
• Strong coding skills, with experience working in modern application stacks (ideally JavaScript/Node.js), and helping engineers build secure code.
• Experience securing web applications & APIs.
• Solid written and verbal communication skills.
• Proactiveness and be self‑driven to be successful working in a remote environment.
• Relevant knowledge of modern web and mobile app security landscape, real‑world attacks and mitigations.
• A belief in our mission and values.

Timezone:
Most timezones will work. Regardless of where you are, some overlap with EU and US‑Pacific time zones will be necessary.

• Experience working as a software developer.
• Familiarity with the Ethereum blockchain and decentralized applications.
• You’re a Meta Mask user.

• Determine the root cause and severity of vulnerabilities reported to us through our bug bounty platform.
• Interface with ethical hackers, triage reports, and guide product…