Jobs › Companies › Metabase › Security Engineer

À propos de ce poste Security Engineer chez Metabase

Metabase · Télétravail · Global Remote
Metabase is the easiest way for people to get insights from their data, from tiny startups who get up and running quickly to major corporations with tens of thousands of users. That's why people love us.
 
We bring data tools with the elegance and simplicity of consumer products to the crufty world of enterprise business intelligence. We provide an opinionated open source starting point for how companies should measure, analyze and share their data, which is used by tens of thousands of companies.

About the Role

We’re looking for a Security Engineer with deep expertise in source code analysis and offensive product security research. You’ll dig into complex software architectures, trace how code behaves at runtime, uncover subtle vulnerabilities, and address the systemic flaws behind them.

Embedded in our core engineering team, you’ll help shape security decisions from early design through release and adoption. This is a hands-on engineering and research role: you’ll combine your security expertise with frontier AI tools to find vulnerabilities, develop fixes, and make Metabase secure by default across its product, dependencies, and runtime.

Things you’ll do

  • Partner with engineers throughout feature development, bringing security expertise to design, implementation, release, and adoption.
  • Build security-focused features, lead security improvements across the codebase, and implement fixes that address root causes.
  • Use and evaluate advanced AI tools to scale code analysis, vulnerability research, and secure engineering practices.
  • Conduct offensive research into Metabase, develop proofs of concept, and validate vulnerabilities.
  • Assess findings based on exploitability and real-world impact, define clear remediation criteria, and verify that fixes are effective.
  • Turn individual findings into broader improvements that prevent entire classes of vulnerabilities.
  • What you bring

  • A demonstrated track record of finding and exploiting application vulnerabilities through source code analysis and hands-on research.
  • The ability to independently navigate unfamiliar codebases, understand complex architectures, and reason about runtime behavior and trust boundaries.
  • Experience with application security challenges, including authentication, authorization, injection, and unsafe handling of untrusted data.
  • Sound judgment about exploitability and real-world impact, and the ability to communicate findings and remediation options clearly.
  • Strong software engineering skills, including the ability to implement durable security fixes. Experience in Clojure, or a strong desire to learn.
  • A thoughtful approach to AI-assisted security work, using these tools to extend your expertise while independently validating their output.
  • Ownership and curiosity: you pursue difficult questions, collaborate closely with engineers, and follow findings through to resolution.

  • CompensationThe US base salary range for this role is $160K–$225K annually, plus equity and benefits.Compensation is determined by role, level, location, and individual qualifications, including skills, experience, and scope of responsibility. Pay may vary by geographic location and other job-related factors.
    BenefitsWe offer meaningful equity and a comprehensive US benefits package, including fully employer-covered medical, dental, and vision insurance (with 75% coverage for dependents), a 401(k) with employer match available to enroll after the first 30 days, flexible and unlimited paid time off including sick time, and an asynchronous, remote-first environment.

    We're a global team (50% outside the US), fully distributed (from Thailand to California), who get things done asynchronously, with plenty of uninterrupted time, supporting each other to do the best work of our careers. We offer flexibility (define your own schedule and work from wherever you want), autonomy, and an environment that fosters growth, learning, and development. We're relentlessly user-focused and believe in building long-term value, not short-term hacks. And we raised a $30M Series B to take our approach to the next level for years to come.
     
    For U.S. applicants: Metabase participates in the federal E-Verify program, which confirms employment authorization of newly hired U.S. based employees. E-Verify is not used as a tool to pre-screen candidates and is only initiated upon hire.
     
    Right to Work Notice (English/Spanish)
    Prêt à postuler chez Metabase ?
    Postuler chez Metabase

    Comment se compare ce salaire pour Security Engineer

    Ce poste paie $192,500/yr — dans la fourchette habituelle pour les postes Security Engineer.

    $104,153 la médiane $171,000 $255,000

    Fourchette typique $136,550–$210,000/yr, à partir de 1,701 annonces Security Engineer comparables sur JobsRadar (rémunération annualisée en USD). Voir les aperçus de salaire pour Security Engineer →

    Emplois similaires

    Alpaca
    Staff Software Engineer - Corporate Actions & Security Master
    Alpaca
    ⚡ Postuler tôt Remote - North America and Eur... · lieu restreint
    ● Nouveau 👁 Vu ✓ Postulé il y a 1 sem.
    Sporty Group
    Offensive Security Engineer
    Sporty Group
    ⚡ Postuler tôt Monde entier
    ● Nouveau 👁 Vu ✓ Postulé il y a 3 sem.
    Supabase
    Platform Security Engineer (AMER/APAC)
    Supabase
    ⚡ Postuler tôt Remote, Global · lieu restreint
    ● Nouveau 👁 Vu ✓ Postulé il y a 1 mois
    ML
    Protocol Security Engineer
    Matter Labs
    ⚡ Postuler tôt Monde entier
    ● Nouveau 👁 Vu ✓ Postulé il y a 1 mois
    Aptos
    Information Security Engineer, Product
    Aptos
    ⚡ Postuler tôt Remote Global (US, EU) · lieu restreint
    ● Nouveau 👁 Vu ✓ Postulé il y a 5 mois
    XR
    Senior Security & Compliance Engineer
    XYZ Reality
    ⚡ Postuler tôt London Office Hybride
    ● Nouveau 👁 Vu ✓ Postulé il y a 1 h
    Rogo
    Security Engineer, Cloud
    Rogo
    ⚡ Postuler tôt New York City Sur site $270,000–$330,000
    ● Nouveau 👁 Vu ✓ Postulé il y a 1 h
    LemFi
    Security Engineer
    LemFi
    ⚡ Postuler tôt London Hybride
    ● Nouveau 👁 Vu ✓ Postulé il y a 1 h
    Immersive
    Cyber Security Engineer - Governance, Risk & Compliance - Remote (UK Only)
    Immersive
    ⚡ Postuler tôt United Kingdom · lieu restreint
    ● Nouveau 👁 Vu ✓ Postulé il y a 1 h

    Inscrivez-vous pour des suggestions adaptées aux emplois que vous ouvrez et aux recherches que vous enregistrez.

    Plus d’emplois chez Metabase

    Voir tous les emplois chez Metabase →

    Postuler maintenant
    🤖

    Doucement — un instant

    JobsRadar a été conçu pour de vraies personnes qui traversent une période difficile dans leur recherche d’emploi — pas pour des requêtes automatisées. Vous cliquez beaucoup trop vite et vous êtes maintenant temporairement bloqué.

    Revenez plus tard. Si vous cherchez réellement un emploi, nous sommes de votre côté — agissez simplement comme un être humain.

    Catch your next role the second it’s posted.

    Create a free account and we’ll watch the boards for you — the instant a job matches your search, it lands in your inbox or Telegram. No digging, no refreshing.

    Create free account

    Free forever · takes 30 seconds · already have one?

    Prenez une longueur d’avance dans votre recherche d’emploi.

    Rejoignez notre canal Telegram pour ce qui vous aide à décrocher le poste — références salariales, le pouls hebdomadaire du marché et les annonces de nouveautés. Pas de spam, que du signal.

    Rejoindre le canal — c’est gratuit