Senior Application Security Engineer

Ever wondered what it takes to truly secure the digital frontier, especially when that frontier is the decentralized web? At Consensys, we're not just observing the future of the internet; we're actively building it, and we need a brilliant Senior Application Security Engineer like you to help safeguard every brick. Imagine being at the heart of Web3 innovation, protecting groundbreaking platforms such as MetaMask and Linea, ensuring millions of users and institutions can trust our infrastructure implicitly. This isn't just another security role; it's a chance to champion trust, drive best practices, and leave an indelible mark on an ecosystem that's reshaping the world, all while working with a globally distributed, pioneering team.

Overview

Consensys stands as the leading blockchain and Web3 software company, founded by Joe Lubin, a co-founder of Ethereum. Since 2014, we have driven innovation within the Web3 ecosystem, helping rebuild the financial system on open, programmable infrastructure. Our mission is clear: unlock the collaborative power of communities by making the decentralized web universally easy to access, use, and build on. We power products like MetaMask, trusted by tens of millions, and Linea, our groundbreaking zkEVM rollup. As a fully remote, globally distributed team, we invite you to join us in building the next layer of the internet, tackling complex challenges and exploring emerging technologies.

Key Responsibilities

In this crucial role, you will be instrumental in fortifying our applications and infrastructure. Expect to:

Conduct comprehensive security reviews and threat modeling for new features and systems within our Web3 products.
Perform hands-on static and dynamic application security testing (SAST/DAST) and interactive application security testing (IAST) on our codebase.
Collaborate closely with development teams throughout the software development lifecycle to embed security best practices from design to deployment.
Develop and implement security tooling, automation, and processes to enhance our overall security posture.
Provide expert guidance and mentorship to engineering teams, fostering a strong security-first culture across the organization.
Respond to and manage security incidents, ensuring timely resolution and continuous improvement.
Research emerging threats, vulnerabilities, and security technologies relevant to the blockchain and Web3 space.
Contribute to the architecture and design of secure, scalable, and resilient decentralized applications.

Requirements

We are looking for someone who brings a robust blend of technical expertise and a passion for Web3 security. Ideal candidates will possess:

Demonstrable experience as an Application Security Engineer, preferably with a significant portion in a senior capacity.
Deep understanding of common application security vulnerabilities (e.g., OWASP Top 10) and mitigation strategies.
Proficiency in at least one modern programming language (e.g., JavaScript/TypeScript, Go, Python, Java).
Hands-on experience with security tools like SAST, DAST, IAST, and vulnerability scanners.
Experience with cloud security principles and practices (e.g., AWS, Azure, GCP).
Familiarity with CI/CD pipelines and integrating security into the development workflow.
Strong communication skills, enabling you to articulate complex security concepts to technical and non-technical audiences alike.
A solid grasp of blockchain fundamentals, smart contract security, and the Web3 ecosystem is a significant plus.
A proactive, problem-solving mindset and a commitment to continuous learning in a rapidly evolving field.

What You'll Gain

Joining Consensys offers more than just a job; it’s an opportunity to shape the future of the internet. You will:

Work with a fully remote, globally distributed team of pioneering technologists, designers, and researchers.
Be at the forefront of innovation, constantly exposed to new ideas and emerging technologies in the Web3 space.
Tackle complex, stimulating challenges that will push your skills and expertise to new heights.
Contribute meaningfully to products used by millions worldwide, making a tangible impact on the decentralized web.
Enjoy a collaborative culture focused on continuous learning and professional growth.
Be part of a mission-driven company that believes in unlocking the power of communities through decentralization.