Determine the root cause and severity of vulnerabilities reported to us through our bug bounty platform
Interface with ethical hackers, triage reports, and guide product engineering teams to resolution
Document identified vulnerabilities in a way that allows for our engineering team to take quick action
Write code to support the development of security engineering projects, or fix vulnerabilities in MetaMask client applications. This includes the development of AI tooling for vulnerability determination and resolution in order to keep pace with the changing AI-powered vulnerability detection landscape
Assess potential security vulnerabilities within our applications, and work with development teams to ensure remediation in our established SLAs
Support product teams as they develop new features by conducting design reviews, threat modeling, security testing, and code reviews
Identify gaps in MetaMask’s secure software development life cycle (SSDLC), and take initiative leading efforts to address them
Participate and contribute to team meetings, roadmap planning, and discussions
Validate that security patches address reported vulnerabilities and test for any potential bypasses
Proactively prevent future occurrences of a vulnerability through developing automation, security controls, and educating developers
Pave your own path in how you want to make MetaMask more secure
Don't meet all the requirements? Don't sweat it. We’re passionate about building a diverse team of humans and as such, if you think you've got what it takes for our chaotic-but-fun, remote-friendly, start-up environment—apply anyway, detailing your relevant transferable skills in your cover letter. While we have a pretty good idea of what we need, we're ready for you to challenge our thinking on who needs to be in this role
It is a requirement of employment in this position that applicants will be required to submit to background checks including but not limited to employment, education and criminal record checks. Further details will be provided to applicants that successfully meet the criteria for the position as determined by the company in its sole discretion. By submitting an application for employment, you are acknowledging and consenting to this requirement
The salary range listed for this role applies to US-based candidates only. Compensation for candidates based outside the US (including Canada, EMEA, and LATAM) will be determined based on location, experience, and skills during the interview process, and may differ from the listed US range
US pay range (not including bonus, equity or other benefits)
In the rapidly evolving Web3 space, we believe that everyone is a builder. This expansive paradigm requires a range of backgrounds, talents, skills, and experiences to influence and shape the future. At Consensys, this diversity fuels our ability to shift control and redefine the realm of possibility. We are committed to ensuring that our technology empowers people and communities with economic and political agency through decentralized technologies. We welcome the range of perspectives and differences and celebrate them. We're excited to see how your unique skills as a builder can contribute to our vision, drive innovation, and help us shape a more inclusive Web3