Senior Application Security Engineer

Overview

We are seeking an experienced Senior Application Security Engineer to join a globally distributed team focused on products and infrastructure for the Web3 ecosystem. This role centers on protecting applications used by millions, specializing in digital assets, identities, decentralized applications, and blockchain technologies.

Key Responsibilities

• Analyze vulnerabilities reported via the bug bounty program, determining their root causes, severity, and suitable remediation plans.
• Collaborate with ethical hackers and engineering teams to triage security findings and ensure vulnerabilities are addressed effectively.
• Document security issues clearly to assist development teams in prioritization and remediation efforts.
• Develop production-grade code to support security initiatives and fix vulnerabilities within client applications.
• Contribute to AI-driven security tools that evolve with emerging threats for vulnerability detection and mitigation.
• Evaluate vulnerabilities across applications and APIs, coordinating with developers to meet security SLAs.
• Assist in security design reviews, threat modeling, testing, and code review for new products and features.
• Identify and address gaps in the secure software development lifecycle by leading improvement initiatives.
• Validate security fixes and patches, testing for possible bypasses or residual security issues.
• Create automation, security controls, and developer education programs to prevent recurring vulnerabilities.
• Engage in security planning, roadmap discussions, and cross-functional technical projects.
• Partner with engineering and product teams to guide secure architectural and implementation decisions.
• Own security improvement projects by implementing innovative and pragmatic solutions to enhance application safety.

Qualifications

• Minimum 6 years of hands-on experience in building and securing software, with a strong focus on application or product security.
• Expertise securing contemporary backend systems, web applications, and APIs.
• Demonstrated ability in threat modeling, security architecture/design reviews, vulnerability assessments, and application security testing.
• Proficient in securing JavaScript-based applications, especially Node.js, React, or React Native, across web or mobile platforms.
• Strong coding proficiency enabling collaboration with developers to identify vulnerabilities and implement fixes.
• In-depth knowledge of modern security principles, common exploits, and defenses for web and mobile environments.
• Familiarity with blockchain, particularly Ethereum, decentralized apps, and cryptocurrency wallets.
• Excellent communication and interpersonal skills, capable of influencing technical strategies in distributed teams.
• Proactive, self-motivated, able to work autonomously in a remote setting.
• Strong analytical mindset with a pragmatic approach to risk identification and mitigation.
• Experience as a software developer is advantageous.
• Advanced knowledge of Ethereum, blockchain technologies, smart contracts, and decentralized applications is a plus.
• Exposure to AI-enabled security tools or vulnerability detection methods is beneficial.
• Experience contributing to Web3 or decentralized projects is desirable.
• Willingness to collaborate with teams overlapping European and US-Pacific time zones.
• Alignment with the mission to develop secure, accessible, user-focused decentralized technologies.

Benefits and Culture

• Fully remote international team fostering a distributed workforce.
• Flexible, asynchronous work schedules to support work-life balance.
• Collaborate globally with experts from six continents.
• Comprehensive benefits package supporting employee wellness.
• Equity participation offering ownership in company growth.
• Unlimited vacation policy encouraging rest and recovery.
• Company-wide recharge days—dedicated non-working days.
• Access to professional development through structured programs and online courses.
• Opportunities for career growth alongside leading professionals in blockchain security.
• Engagement with cutting-edge Web3 security challenges.
• High-impact work that protects millions of users and developers.
• Empowered autonomy with meaningful influence over security strategies and engineering methodologies.

Additional Information

This listing is shared on behalf of a partner company who manages applications and hiring processes. The role requires alignment with building secure and user-centric decentralized technologies and collaboration across global time zones. Applicants should expect an AI-supported but human-led recruitment evaluation process.