Senior Manager, Application Security

MetaMask spent the last ten years building Open Money; with 100M+ downloads, users in ~190 countries, and trillions in cumulative transaction volume, it's the most trusted self-custodial financial platform on the internet. Now we're building the operating system for your money: one place to hold, move, grow, and use anything you own. Join a remote-first, global team rebuilding how money works.

• Lead and develop the Application Security team, including hiring, performance management and career development, while remaining directly involved in technical work.
• Set the Application Security strategy, annual goals and quarterly OKRs in line with company objectives and the approved Target Operating Model.
• Report AppSec progress, coverage, remediation performance and material gaps to Security leadership and contribute to Risk Committee reporting.
• Define security review requirements across development and release, assess whether they are met and escalate unresolved risks.
• Lead threat modelling and security design reviews across clients, APIs and backend services, including authentication, key management, signing and delegated actions.

• At least eight years in application security or software engineering with a security focus, including two years leading people.
• Strong practical code review skills in TypeScript/JavaScript, Go or Solidity across browser extensions, mobile applications and backend services.
• Proven experience securing applications across clients and backend services, including distributed authentication, authorisation and key management.
• Experience building or substantially improving an AppSec programme, including security reviews, automated testing, vulnerability management and developer support.
• Practical experience securing software supply chains, including dependency policies, software composition analysis, npm, artefact integrity and CI/CD.

MetaMask is hiring for this role as listed on its official careers page. Posted 2026-10-16. Always confirm the latest details and compensation on the employer's application page.