Senior Application Security Engineer – MetaMask

The MetaMask team at Consensys is looking for a Senior Application Security Engineer to join our growing team. As a Senior Application Security Engineer, you will be responsible for ensuring the security and privacy of our web3 wallet and browser extension. You will work closely with our engineering teams to identify and mitigate security vulnerabilities, implement secure coding practices, and contribute to the overall security posture of our products. Responsibilities: - Conduct security audits, risk assessments, and penetration testing of our web3 applications and infrastructure - Identify, analyze, and remediate security vulnerabilities - Develop and implement secure coding practices, standards, and guidelines - Provide security guidance and training to our engineering teams - Collaborate with cross-functional teams to ensure security is integrated throughout the software development lifecycle - Stay up-to-date with the latest security trends, threats, and best practices in the web3 and blockchain space Requirements: - 5+ years of experience in application security, with a focus on web and blockchain security - Proficient in security testing and vulnerability analysis using tools like Burp Suite, Nmap, and Metasploit - Solid understanding of web application security, including OWASP Top 10, CSRF, XSS, and other common vulnerabilities - Experience with secure coding practices and implementing security controls in web applications - Familiarity with blockchain technology, cryptocurrencies, and decentralized applications - Strong problem-solving and analytical skills, with the ability to think critically about security risks - Excellent communication skills to effectively collaborate with engineering and non-technical stakeholders - Passion for staying up-to-date with the latest security trends and technologies

ConsenSys is a leading blockchain technology company, building the infrastructure, applications, and practices that enable a decentralized world. We are a venture production studio and custom software engineering consultancy that builds decentralized applications (dApps), enterprise solutions and developer tools for blockchain ecosystems, focused primarily on Ethereum.