Determine the root cause and severity of vulnerabilities reported through the bug bounty platform.
Interface with ethical hackers, triage reports, and guide product engineering teams to resolution.
Document identified vulnerabilities so the engineering team can take quick action.
Write code to support the development of security engineering projects or fix vulnerabilities in MetaMask client applications.
Develop AI tooling for vulnerability determination and resolution to keep pace with the changing AI-powered vulnerability detection landscape.
Assess potential security vulnerabilities within applications and work with development teams to ensure remediation within established SLAs.
Support product teams in developing new features by conducting design reviews, threat modeling, security testing, and code reviews.
Identify gaps in MetaMask’s secure software development life cycle (SSDLC) and lead efforts to address them.
Participate and contribute to team meetings, roadmap planning, and discussions.
Validate that security patches address reported vulnerabilities and test for potential bypasses.
Proactively prevent future occurrences of vulnerabilities through automation, security controls, and developer education.
Pave your own path in how you want to make MetaMask more secure.

6+ years of experience building and securing software, including hands-on product or application security experience.
Experience securing modern backend systems, web applications, and APIs.
Experience performing threat modelling, security design reviews, and vulnerability assessment.
Experience securing JavaScript-based applications across web and/or mobile (Node.js, React, React Native preferred).
Strong coding skills, with the ability to work directly with engineers to identify and fix vulnerabilities or build secure solutions.
Familiarity with Blockchain technology (particularly Ethereum), Decentralized Applications and crypto wallets.
Solid understanding of the modern web and mobile security landscape, including common attack vectors and mitigations.
Strong communication skills, with the ability to influence engineering decisions and collaborate effectively in a remote environment.
Self-driven and proactive, comfortable operating in a high-autonomy, distributed team.
Alignment with our mission and values.

Experience working as a software developer.
Deep knowledge of Ethereum (and other blockchains), Decentralized Applications and crypto wallets.
Knowledge of smart contract implementation and security.
You’re a MetaMask user!

Consensys is hiring a Senior Application Security Engineer