Senior Manager, Application Security

About this role

MetaMask is seeking a Senior Manager for Application Security to lead their application security efforts across various platforms including their extension, mobile app, and smart contracts. The role involves hands-on leadership with responsibilities in security strategy, team development, and code reviews to secure their financial platform against vulnerabilities.

About the company

Consensys is a software company focused on building decentralized applications and infrastructure for the Ethereum blockchain. They offer solutions that enhance user experience and security, serving businesses and developers in the blockchain ecosystem.

The team

Application Security team

Stack

What you'll do

• Lead and develop the Application Security team
• Set Application Security strategy and track KPIs
• Define security review requirements and escalate risks
• Lead threat modelling and security design reviews
• Integrate security testing into development workflows
• Own application vulnerability assessment and management
• Provide application security expertise during incidents

What we're looking for

• 8+ years in application security or software engineering with security focus
• Strong skills in code review for TypeScript/JavaScript, Go, or Solidity
• Experience securing applications across clients and backend services
• Proven ability to build or improve an AppSec programme
• Practical experience securing software supply chains
• Experience running bug bounty and penetration testing programmes
• Knowledge of EVM smart contract security
• Clear written communication skills

Nice to have

• Offensive security qualifications (OSCP, OSWE, OSWA)
• Experience securing browser extensions or mobile applications
• Experience with AI in development workflows
• Background in crypto or Web3
• Interest in applied cryptography
• Familiarity with attacks by state actors