--- title: 'Senior Application Security Engineer at Consensys' canonical: 'https://feeny.ai/job/senior-application-security-engineer-consensys-united-states-emea-1as0chk3t5r4' type: 'job' last_seen: '2026-09-10' --- # Senior Application Security Engineer at Consensys - **Company:** Consensys - **Location:** United States / EMEA - **Compensation:** $130k–$218k - **Work type:** remote - **Posted:** 2026-03-30 - **Last confirmed live:** 2026-09-10 - **Apply:** https://consensys.io/open-roles/7743627?gh_jid=7743627 ## Job description Please note that we are unable to consider applications from candidates based in France, Italy, or Germany for this role. Money is moving onto the internet, and the shift has a name: Open Money. This is money that is open, portable, agentic, and owned by you. MetaMask spent the last ten years building it; with 100M+ downloads, users in ~190 countries, and trillions in cumulative transaction volume, it's the most trusted self-custodial financial platform on the internet. Now we're building the operating system for your money: one place to hold, move, grow, and use anything you own.  Join a remote-first, global team rebuilding how money works: a problem that touches everyone, every day. ## About MetaMask We’re building for a future where the internet and world economy empowers people through interactions based on consent, privacy, and free association. Where both communities and individuals flourish. To accomplish that, we’re working hard to make web3 accessible for everyone around the world. MetaMask is both a crypto wallet and a gateway to the decentralized web. Our tools help people create communities, play video games, access financial services, make payments, invest in assets, protect against economic turmoil, and more. Our browser extension and mobile platforms meet the needs of millions of users and developers across the world. Originally a humble key manager, today MetaMask serves over[30 million monthly active users](https://techcrunch.com/2022/03/15/metamask-parent-company-consensys-raises-series-d-at-7b-valuation/?guccounter=1&guce_referrer=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS8&guce_referrer_sig=AQAAAA17TpZSF_aCYTb-Ju92B34bkm5hs-N4Cxdpk5lR_Ve3lZQOiYFcfqkk_oNHMu1faSa-Ht5LMGxK7LHEnzCg3bAQJH3KI8SPhqQTd31XsNZyNQ3HUFwhID8cZGy9qzjoXK7tUdxKlfXV2mikuuez0jodL5s1UMpbed6hY3dhwUQO#:~:text=MetaMask%20alone%20has%20over%2030,Ethereum%20wallet%20by%20this%20metric.) as a[decentralized application development platform](https://docs.metamask.io/guide/), an[aggregator of decentralized cryptocurrency exchanges](https://medium.com/metamask/introducing-metamask-swaps-84318c643785), and a decentralized identity manager. ## About the Role MetaMask has experienced explosive user growth over the past year as a cryptographic key manager and web3 application development platform. As this user base continues to grow, an immense amount of trust is being placed in MetaMask as a tool that manages and wields their digital authority, controlling assets, identities and more. It is of highest importance to us that we keep our users as safe and secure as possible. We are looking for a Senior Application Security Engineer to join our rapidly growing security team to help embed security into all phases of the software development lifecycle. You would work closely with development teams and product managers to ensure MetaMask products are designed and implemented to the highest security standards. Consenys’s application security team primarily supports MetaMask with opportunities to expand to additional products in the Consensys family. To apply for this position, you must have: - 6+ years of experience building and securing software, including hands-on product or application security experience. - Experience securing modern backend systems, web applications, and APIs. - Experience performing threat modelling, security design reviews, and vulnerability assessment. - Experience securing JavaScript-based applications across web and/or mobile (Node.js, React, React Native preferred). - Strong coding skills, with the ability to work directly with engineers to identify and fix vulnerabilities or build secure solutions. - Familiarity with Blockchain technology (particularly Ethereum), Decentralized Applications and crypto wallets - Solid understanding of the modern web and mobile security landscape, including common attack vectors and mitigations. - Strong communication skills, with the ability to influence engineering decisions and collaborate effectively in a remote environment. - Self-driven and proactive, comfortable operating in a high-autonomy, distributed team. - Alignment with our mission and values. Timezone: Most timezones will work. Regardless of where you are, some overlap with EU and US-Pacific time zones will be necessary. Nice to have: - Experience working as a software developer. - Deep knowledge of Ethereum (and other blockchains), Decentralized Applications and crypto wallets. - Knowledge of smart contract implementation and security. - You’re a MetaMask user! ## Responsibilities - Determine the root cause and severity of vulnerabilities reported to us through our bug bounty platform. - Interface with ethical hackers, triage reports, and guide product engineering teams to resolution. - Document identified vulnerabilities in a way that allows for our engineering team to take quick action. - Write code to support the development of security engineering projects, or fix vulnerabilities in MetaMask client applications. This includes the development of AI tooling for vulnerability determination and resolution in order to keep pace with the changing AI-powered vulnerability detection landscape. - Assess potential security vulnerabilities within our applications, and work with development teams to ensure remediation in our established SLAs. - Support product teams as they develop new features by conducting design reviews, threat modeling, security testing, and code reviews. - Identify gaps in MetaMask’s secure software development life cycle (SSDLC), and take initiative leading efforts to address them. - Participate and contribute to team meetings, roadmap planning, and discussions. - Validate that security patches address reported vulnerabilities and test for any potential bypasses - Proactively prevent future occurrences of a vulnerability through developing automation, security controls, and educating developers. - Pave your own path in how you want to make MetaMask more secure. Don't meet all the requirements? Don't sweat it. We’re passionate about building a diverse team of humans and as such, if you think you've got what it takes for our chaotic-but-fun, remote-friendly, start-up environment—apply anyway, detailing your relevant transferable skills in your cover letter. While we have a pretty good idea of what we need, we're ready for you to challenge our thinking on who needs to be in this role. It is a requirement of employment in this position that applicants will be required to submit to background checks including but not limited to employment, education and criminal record checks. Further details will be provided to applicants that successfully meet the criteria for the position as determined by the company in its sole discretion. By submitting an application for employment, you are acknowledging and consenting to this requirement. The salary range listed for this role applies to US-based candidates only. Compensation for candidates based outside the US (including Canada, EMEA, and LATAM) will be determined based on location, experience, and skills during the interview process, and may differ from the listed US range. US pay range (not including bonus, equity or other benefits) $130,000—$218,000 USD In the rapidly evolving Web3 space, we believe that everyone is a builder. This expansive paradigm requires a range of backgrounds, talents, skills, and experiences to influence and shape the future. At Consensys, this diversity fuels our ability to shift control and redefine the realm of possibility. We are committed to ensuring that our technology empowers people and communities with economic and political agency through decentralized technologies. We welcome the range of perspectives and differences and celebrate them. We're excited to see how your unique skills as a builder can contribute to our vision, drive innovation, and help us shape a more inclusive Web3. Consensys is an equal opportunity employer. All employment decisions are made without regard to race, color, national origin, ancestry, sex, gender, gender identity or expression, sexual orientation, age, genetic information, religion, disability, medical condition, pregnancy, marital status, family status, veteran status, or any other characteristic protected by law. Consensys is aware of fraudulent recruitment practices and we encourage all applicants to review our best practices to protect yourself which can be found on our page. ## About Consensys ## Company Overview - **One-liner**: Consensys is a leading blockchain software company building the consumer platform, developer infrastructure, and protocol software powering the Ethereum ecosystem and the decentralized web. - **Entity Type**: Private (Series D-II; total raised $732.5M) - **Headquarters**: Fort Worth, Texas, United States - **Founded**: 2014 - **Founders**: Joseph Lubin (also co-founder of Ethereum) ## Core Business - **Primary industry/industries**: Blockchain infrastructure, decentralized finance (DeFi), Web3 software, cryptocurrency wallets, developer tools, layer-2 scaling. - **Target customers**: B2B (developers, enterprises, institutions) and B2C (individual crypto users). Serves both retail consumers and institutional clients. - **Mission or purpose statement**: "Inspire and empower the builder in everyone" / Build the "trustware finance stack for the future global economy." ## Products & Services - **MetaMask**: The world's leading self-custodial cryptocurrency wallet and Web3 gateway, used by over 100 million people annually. Available as a browser extension and mobile app. Includes MetaMask Card (spend tokens anywhere Mastercard is accepted) and MetaMask USD (stablecoin from a self-custodial wallet). - **Infura**: Industry-standard blockchain infrastructure API, enabling developers to build and scale decentralized applications without running their own nodes. - **Linea**: A fully Ethereum-equivalent zkEVM (zero-knowledge Ethereum Virtual Machine) Layer 2 scaling network, launched in 2023. - **Consensys Staking**: Institutional-grade staking services for ETH and other proof-of-stake networks. - **Truffle (formerly)**: Developer toolkit for Ethereum smart contract development (historically significant, now evolved/absorbed into other offerings). - **Protocol Clients**: Contributes to and maintains Ethereum execution and consensus layer clients that help secure the Ethereum network. ## Market Standing - **Valuation/Market Cap**: Not publicly disclosed. Raised $450M in Series D in 2022, followed by a Series D-II in 2024. - **Key Metric**: Total funding of $732.5M across multiple rounds. - **Notable Investors/Partners**: Joseph Lubin (founder/CEO) is a key backer; the company has a treasury strategy through sister company Sharplink, which invested over $3 billion in ETH. Key partners include Mastercard (MetaMask Card), Ethereum Foundation, and numerous DeFi/Web3 protocols. - **Growth Signals**: MetaMask serves 100M+ users annually; Linea Mainnet launched in 2023; MetaMask Card and MetaMask USD announced in 2024; Sharplink (sister company) invested nearly $500M in ETH in a single purchase in August 2025; Forbes 2024 America’s Best Startup Employers. ## Competitive Advantages - **Ethereum Native**: Founded by Ethereum co-founder Joseph Lubin, Consensys has been integral to Ethereum from before the genesis block, contributing to every major upgrade (including "the Merge" to Proof of Stake). - **Full-Stack Dominance**: Uniquely spans consumer (MetaMask), developer infrastructure (Infura), scaling (Linea), and protocol security (clients) — creating an integrated ecosystem and deep moat. - **Regulatory Advocacy**: Actively engages with governments (US, EU) to shape smart, innovation-friendly digital asset regulation, filing amicus briefs in key legal cases. - **Treasury Strength**: Through sister company Sharplink, holds a massive ETH treasury ($3B+ invested), providing financial stability and strategic flexibility. ## Strategic Focus - **Scaling Ethereum**: Driving adoption of Linea as a leading zkEVM Layer 2 to scale Ethereum's capacity and reduce transaction costs. - **Consumer Finance**: Expanding MetaMask beyond a wallet into a full consumer finance platform (MetaMask Card, MetaMask USD, staking). - **Developer Ecosystem**: Continuing to provide best-in-class infrastructure (Infura) and tools to attract and retain developers building on Ethereum. - **Regulatory Clarity**: Advocating for clear, well-designed regulatory frameworks to support blockchain innovation globally. ## Why Work Here - **Remote-First Culture**: Global team of 700+ across 6 continents; full remote flexibility with async working norms. Remote work stipend provided for home office setup. - **Competitive Compensation**: Equity for all employees; option to receive up to 10% of after-tax monthly salary in ETH (crypto compensation). - **Generous Time Off**: Unlimited PTO (minimum 3 weeks encouraged), plus "Productivity Zero" rest days (no email/slack) and an extended Productivity Zero week at year-end. - **Learning & Growth**: Access to Consensys Advance Program, full Coursera subscription, company-wide training, quarterly Innovation Takeover Days, and hackathons (with NFT rewards). - **Inclusive & Mission-Aligned**: Strong employee resource groups (ERGs), a focus on belonging and diversity, and a mission to build a decentralized, equitable global financial system. - **Health & Wellness**: Competitive health coverage based on location, plus equity ownership in the company. - **Work Style**: High agency and autonomy, with flexible schedules to accommodate different time zones and working styles. Emphasis on deep work and impact. ## Sources 1. [consensys.io](https://consensys.io/company) 2. [consensys.io](https://consensys.io/careers) 3. [consensys.io](https://consensys.io/careers/culture) 4. [consensys.io](https://consensys.io/open-roles) 5. [cbinsights.com](https://www.cbinsights.com/company/consensys) ## Other roles at Consensys - [Senior Software Engineer: Social & AI - MetaMask](https://feeny.ai/job/senior-software-engineer-social-ai-metamask-consensys-emea-rh1vzhtn9sws) — EMEA - [Senior HRIS Administrator II](https://feeny.ai/job/senior-hris-administrator-ii-consensys-united-states-canada-latin-america-sg74jkax92p2) — United States / Canada / Latin America - [Senior Lifecycle Marketing Manager](https://feeny.ai/job/senior-lifecycle-marketing-manager-consensys-united-states-latin-america-8wb9gwy634sh) — United States / Latin America - [Product Marketing Lead - Trade](https://feeny.ai/job/product-marketing-lead-trade-consensys-united-states-emea-latam-ajt27g7b0s89) — United States / EMEA / LATAM - [Staff UX Motion Designer - MetaMask](https://feeny.ai/job/staff-ux-motion-designer-metamask-consensys-united-states-canada-latin-america-nd1pfzgr434c) — United States / Canada / Latin America - [Senior Design Engineer - MetaMask](https://feeny.ai/job/senior-design-engineer-metamask-consensys-united-states-emea-hren5s4kyz79) — United States / EMEA - [Senior Application Security Engineer](https://feeny.ai/job/senior-application-security-engineer-thought-machine-lisbon-damcsy44evxb) — Lisbon, Portugal - [Senior Application Security Engineer](https://feeny.ai/job/senior-application-security-engineer-tripadvisor-oxford-tsk2a41prkr7) — Oxford, United Kingdom / London, United Kingdom - [Senior Application Security Engineer](https://feeny.ai/job/senior-application-security-engineer-upstart-united-states-xmeqft31gna4) — United States - [Senior Application Security Engineer](https://feeny.ai/job/senior-application-security-engineer-charterup-austin-gtbzexff4yza) — Austin, TX