Security Engineer | Metabase

Security Engineer | Metabase

📍 Location: Global Remote

Job Type: Full-time, Remote

Compensation: $160,000–$225,000 annually, plus equity and benefits (US base salary range)

Metabase is seeking a Security Engineer with expertise in source code analysis, vulnerability research, and application security. The successful candidate will identify and address security vulnerabilities, strengthen the codebase, and help ensure security is integrated throughout product development.

• Collaborate with engineers to integrate security into design, implementation, release, and adoption.
• Build security-focused features and implement lasting fixes across the codebase.
• Use and evaluate AI tools for code analysis and vulnerability research.
• Conduct offensive security research, develop proof-of-concept exploits, and validate vulnerabilities.
• Assess exploitability and real-world impact, define remediation criteria, and verify fixes.
• Identify systemic improvements to prevent entire classes of vulnerabilities.

• Proven experience identifying and exploiting application vulnerabilities through source code analysis and hands-on research.
• Ability to navigate unfamiliar codebases and understand complex architectures, runtime behaviour, and trust boundaries.
• Experience with authentication, authorization, injection, and handling untrusted data securely.
• Strong software engineering skills