Senior Application Security Engineer

25 days ago

Remote, United States or Remote, EMEASenior

H1B Sponsor

Base Salary

$130k - $218k/yr

Responsibilities

Determine the root cause and severity of vulnerabilities reported through the bug bounty platform.
Interface with ethical hackers, triage reports, and guide product engineering teams through resolution.
Document vulnerabilities clearly so engineering teams can act quickly.
Write security engineering code, vulnerability fixes, and AI tooling for vulnerability determination and resolution.
Assess application vulnerabilities and work with development teams on remediation within established SLAs.
Conduct design reviews, threat modeling, security testing, and code reviews for new product features.
Identify and lead efforts to address gaps in MetaMask’s secure software development lifecycle.
Validate security patches and test for potential bypasses.
Develop automation and security controls and educate developers to prevent recurring vulnerabilities.
Participate in team meetings, roadmap planning, and technical discussions.

At least 6 years of experience building and securing software, including hands-on product or application security experience.
Experience securing modern backend systems, web applications, and APIs.
Experience with threat modeling, security design reviews, and vulnerability assessment.
Experience securing JavaScript-based web or mobile applications; Node.js, React, and React Native are preferred.
Strong coding skills and the ability to identify and fix vulnerabilities or build secure solutions with engineers.
Familiarity with blockchain technology, particularly Ethereum, decentralized applications, and crypto wallets.
Strong understanding of modern web and mobile security threats, attack vectors, and mitigations.
Strong communication and collaboration skills in a remote environment.
Experience working as a software developer is preferred.
Deep knowledge of Ethereum and other blockchains, decentralized applications, and crypto wallets is preferred.
Knowledge of smart contract implementation and security is preferred.
Applicants must consent to employment background checks, including employment, education, and criminal record checks.
Applicants must be able to work with some overlap across EU and US-Pacific time zones.

Fully remote work with a globally distributed team.
Most time zones are supported, subject to required EU and US-Pacific overlap.
US base salary range of $130,000—$218,000, excluding bonus, equity, and other benefits; compensation outside the US is location-dependent.
Opportunities to work on MetaMask products serving more than 30 million monthly active users and on emerging Web3 technologies.
Equal opportunity employer committed to a diverse and inclusive workplace.

501-1,000 employees

A complete suite of trusted products to build anything in web3.