Remote Security Engineer — Source Code & Offensive Research

Metabase; Österreich; Remote; EUR 145.000 - 204.000; Vollzeit

Benefits dieser Stelle

Equity

Health insurance

Dental insurance

Vision insurance

401(k) with employer match

Unlimited PTO

Remote-first environment

Zusammenfassung

Metabase is seeking a Security Engineer with deep expertise in source code analysis and offensive product security research. You’ll dig into complex software architectures, trace how code behaves at runtime, uncover subtle vulnerabilities, and address the systemic flaws behind them.

Embedded in our core engineering team, you’ll shape security decisions from design through release. This hands‑on role combines security expertise with frontier AI tools to find vulnerabilities, develop fixes, and

Qualifikationen

• Proven track record of finding and exploiting vulnerabilities via source code analysis.
• Ability to navigate unfamiliar codebases and reason about runtime behavior.
• Experience with application security challenges including authentication, authorization, injection, and unsafe data handling.
• Clear communication of findings and remediation options.
• Strong software engineering skills with ability to implement durable security fixes; experience in Clojure or willingness to learn.
• Thoughtful use of AI-assisted security tools and independent validation of outputs.
• Ownership and curiosity to pursue difficult questions and collaborate with engineers.

Aufgaben

• Partner with engineers to embed security in design, implementation, release, and adoption.
• Build security-focused features and fixes addressing root causes across the codebase.
• Leverage AI tools to scale code analysis and vulnerability research.
• Conduct offensive research, develop PoCs, and validate vulnerabilities.
• Assess exploitability and impact; define remediation criteria and verify fixes.
• Turn findings into broader improvements to prevent classes of vulnerabilities.

Kenntnisse

Source code analysis

Offensive security research

Runtime behavior reasoning

Authentication security

Authorization security

Injection vulnerabilities

AI-assisted security

Security remediation

Clojure (or willingness to learn)

Ownership and curiosity

Jobbeschreibung

Metabase is seeking a Security Engineer with deep expertise in source code analysis and offensive product security research. You’ll dig into complex software architectures, trace how code behaves at runtime, uncover subtle vulnerabilities, and address the systemic flaws behind them.

Embedded in our core engineering team, you’ll shape security decisions from design through release. This hands‑on role combines security expertise with frontier AI tools to find vulnerabilities, develop fixes, and