Remote Senior AppSec Leader — Strategy & Security Reviews

Neobankbeat; United States; Sur place; USD 180 000 - 240 000; Plein temps

Résumé du poste

MetaMask is seeking a Senior Manager, Application Security to lead security across the MetaMask extension, mobile app, Snaps, backend services, DeFi primitives, stablecoins, and supporting smart contracts. The role involves architecture, code, dependencies, build and release controls, security testing, and vulnerability disclosure.

You will set the strategy and operating model, lead a small senior team, and remain directly involved in code review and threat modelling.

Qualifications

• Eight+ years in application security or software engineering with a security focus, including leadership experience.
• Proven code review skills across browser extensions, mobile apps and backend services in TS/JS, Go or Solidity.
• Experience securing applications across clients and backend services with authentication, authorization and key management.
• Experience building or improving an AppSec programme with automated testing, AI scanning, vulnerability management and developer support.
• Experience securing software supply chains including dependencies and CI/CD.
• Experience running bug bounty and penetration testing programmes.

Responsabilités

• Lead and develop the Application Security team, including hiring and performance management.
• Set the AppSec strategy, goals and quarterly OKRs; define KPIs to measure progress.
• Define security review requirements across development and release processes.
• Lead threat modelling and security design reviews for APIs, backend services and smart contracts.
• Define software supply chain security requirements and validate controls.
• Lead security code reviews across MetaMask apps and contracts; address findings.
• Evolve the secure development lifecycle to include AI components and review requirements.
• Integrate security testing into dev/delivery workflows with static/dynamic analysis and AI scanning.
• Provide secure coding guidance and run security champions programme.

Connaissances

TypeScript/JavaScript

Go

Solidity

Threat modelling

Security reviews

Bug bounty programs

Outils

CI/CD

Vulnerability management

Description du poste

MetaMask is seeking a Senior Manager, Application Security to lead security across the MetaMask extension, mobile app, Snaps, backend services, DeFi primitives, stablecoins, and supporting smart contracts. The role involves architecture, code, dependencies, build and release controls, security testing, and vulnerability disclosure.

You will set the strategy and operating model, lead a small senior team, and remain directly involved in code review and threat modelling.