Senior Manager, Application Security
Consensys · Engineering · Lead · 28d ago
Open to candidates across EMEA.
Direct from the employer's own careers page
Who can apply
Read straight from the listing, so you know before you spend time on it.
Open to candidates across EMEA.
“EMEA - Remote”
Country restrictions apply
Can't hire from: France, Italy, Germany.
EMEA remote team, excluding candidates in France, Italy, or Germany.
- Async-first
- The listing doesn't promise async-first working.
- Contractor / B2B
- No mention of hiring international contractors or invoicing.
- Global stipend
- No home office or equipment budget mentioned.
- Annual retreat
- No company-paid get-togethers mentioned.
Read from the listing automatically. Always confirm the details with the company before you accept an offer.
About the role
As Senior Manager, Application Security, you will lead AppSec across MetaMask's ecosystem, including extension, mobile, Snaps, backend services, DeFi primitives, stablecoins, and smart contracts. This is a hands-on leadership position where you will define strategy, guide a small senior team, and remain directly involved in technical tasks such as threat modelling and code reviews.
What you'll do
- Lead and develop the Application Security team, managing hiring, performance, and career development while remaining technically active.
- Set the AppSec strategy, annual goals, OKRs, and KPIs aligned with company objectives and report progress to executive security leadership.
- Lead threat modelling, security design reviews, and security code reviews across MetaMask applications, backend services, and smart contracts.
- Define software supply chain security requirements and embed static, dynamic, and AI security testing across CI/CD delivery pipelines.
- Oversee application vulnerability triage and prioritization, and direct penetration testing and bug bounty programmes.
- Provide application security subject matter expertise during incident response and support external compliance audits such as SOC 2 and ISO 27001.
What you bring
- At least 8 years in application security or software engineering with a security focus, including 2 years managing teams.
- Strong hands-on code review skills in TypeScript/JavaScript, Go, or Solidity across client apps and backend services.
- Proven track record securing software supply chains (CI/CD, npm, dependency management) and distributed architectures.
- Working knowledge of EVM smart contract security, including review methods, upgrade patterns, and evaluation of external audits.
- Experience managing external testing providers and running bug bounty programmes.
- Demonstrated ability to drive cross-functional security improvements with engineering teams outside your reporting line.
About Consensys
Consensys is a leading blockchain and Web3 software company best known for MetaMask, the self-custodial financial platform used by over 100 million people worldwide.
View Consensys profile & open roles →