Security Engineer: Offensive Code Research (Remote)

Metabase; Pakistan; Teletrabalho; PKR 44 260 000 - 62 241 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Equity

Medical/dental/vision insurance

401(k) with employer match

Unlimited PTO

Remote-first with asynchronous work

Global distributed team

Resumo da oferta

Metabase is seeking a Security Engineer to perform source code analysis and offensive security research, embedding security from design through release. You will dig into complex architectures, trace runtime behavior, uncover vulnerabilities, and drive secure-by-default across the product, dependencies, and runtime.

This hands‑on role combines security expertise with frontier AI tools to find fixes, validate remediation, and prevent classes of vulnerabilities.

Qualificações

• Proven track record of finding and exploiting vulnerabilities through code analysis.
• Ability to navigate unfamiliar codebases and reason about runtime behavior.
• Experience with authentication, authorization, injection and untrusted data handling.
• Strong communication of findings and remediation options.
• Willingness to use AI tools while validating outputs.
• Proactive ownership and collaboration with engineers.

Responsabilidades

• Partner with engineers to integrate security throughout feature development.
• Build security-focused features and fixes addressing root causes.
• Use AI tools to scale code analysis and vulnerability research.
• Conduct offensive security research and develop PoCs.
• Assess findings and define remediation criteria; verify fixes.
• Turn findings into broader improvements to prevent vulnerability classes.

Conhecimentos

Source code analysis

Vulnerability research

Offensive security

AI-assisted security

Clojure

Runtime analysis

Authentication & Authorization

Secure coding

Descrição da oferta de emprego

Metabase is seeking a Security Engineer to perform source code analysis and offensive security research, embedding security from design through release. You will dig into complex architectures, trace runtime behavior, uncover vulnerabilities, and drive secure-by-default across the product, dependencies, and runtime.

This hands‑on role combines security expertise with frontier AI tools to find fixes, validate remediation, and prevent classes of vulnerabilities.