Security Engineer

Metabase is seeking a Security Engineer to strengthen product security through source code analysis, vulnerability research, and integration of security practices across the development lifecycle. The role involves building secure features, conducting offensive security research, and ensuring robust remediation of vulnerabilities.

Responsibilities

• Collaborate with engineers to integrate security into design, implementation, release, and adoption.
• Build security-focused features and implement lasting fixes across the codebase.
• Use and evaluate AI tools for code analysis and vulnerability research.
• Conduct offensive security research, develop proof-of-concept exploits, and validate vulnerabilities.
• Assess exploitability and real-world impact, define remediation criteria, and verify fixes.
• Identify systemic improvements to prevent entire classes of vulnerabilities.

Requirements

• Proven experience identifying and exploiting application vulnerabilities through source code analysis and hands-on research.
• Ability to navigate unfamiliar codebases and understand complex architectures, runtime behaviour, and trust boundaries.
• Experience with authentication, authorization, injection, and handling untrusted data securely.
• Strong software engineering skills and the ability to implement durable security fixes.
• Experience with Clojure or a strong willingness to learn.
• Ability to use AI-assisted security tools thoughtfully and independently validate their outputs.
• Strong communication, ownership, curiosity, and collaboration skills.

Salary $160,000–$225,000 annually, plus equity and benefits (US base salary range)

How to Apply Apply via: https://jobs.lever.co/metabase/a0196239-ed3e-4bb0-9760-a52c2fcc0e21