160K–225K USD / year
Security Engineer
OtherRemote — worldwide
Published on 2026-10-14
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Research and address security vulnerabilities across Metabase’s product, dependencies, and runtime. Partner with engineers to build secure features and durable fixes, using AI-assisted tools while independently validating their results.
About the company
Metabase is an open-source business intelligence platform that helps teams explore data, build dashboards, and share insights without complex setup.
What you'll do
- Advise on security throughout feature design, implementation, release, and adoption
- Conduct source-code analysis and offensive security research, including proofs of concept
- Assess vulnerability exploitability and impact, define remediation criteria, and verify fixes
- Implement root-cause fixes and broader improvements that prevent classes of vulnerabilities
- Evaluate AI tools for security research and secure engineering
What we're looking for
- Track record finding and exploiting application vulnerabilities through source-code analysis and hands-on research
- Ability to navigate unfamiliar codebases and reason about architecture, runtime behavior, and trust boundaries
- Experience with authentication, authorization, injection, and untrusted data handling
- Strong software engineering skills and ability to implement durable security fixes
- Clear communication and sound judgment about exploitability and real-world impact
- Thoughtful use of AI tools, with independent validation of their output
Nice to have
- Experience with Clojure or willingness to learn
Benefits
- Equity
- Fully employer-covered medical, dental, and vision insurance for employees, with 75% dependent coverage
- 401(k) with employer match
- Flexible, unlimited paid time off, including sick time
- Asynchronous, remote-first work environment