Security Engineer: Offensive Research & AI-Driven Defenses

Metabase; United States; À distance; USD 160 000 - 225 000; Plein temps

Avantages offerts par ce poste

Equity

Remote-first

Comprehensive healthcare

401(k) with employer match

Paid time off

Résumé du poste

Metabase is seeking a Security Engineer with deep expertise in source code analysis and offensive product security research. You’ll dig into complex software architectures, trace how code behaves at runtime, uncover subtle vulnerabilities, and address the systemic flaws behind them.

Embedded in our core engineering team, you’ll help shape security decisions from early design through release and adoption. This is a hands-on engineering and research role: you’ll combine your security expertise

Qualifications

• Proven track record of finding and exploiting vulnerabilities through source code analysis.
• Ability to navigate unfamiliar codebases and reason about runtime behavior and trust boundaries.
• Experience with authentication, authorization, injection, and untrusted data handling.

Responsabilités

• Partner with engineers throughout feature development to bring security expertise to design, implementation, release, and adoption.
• Build security-focused features, lead security improvements across the codebase, and implement fixes addressing root causes.
• Use and evaluate advanced AI tools to scale code analysis, vulnerability research, and secure engineering practices.
• Conduct offensive research into Metabase, develop proofs of concept, and validate vulnerabilities.
• Assess findings for exploitability and real-world impact, define remediation criteria, and verify fixes.
• Turn individual findings into broader improvements that prevent entire classes of vulnerabilities.

Connaissances

Source code analysis

Offensive security research

Security engineering

Clojure

AI tooling

Communication of findings

Ownership and curiosity

Description du poste

Metabase is seeking a Security Engineer with deep expertise in source code analysis and offensive product security research. You’ll dig into complex software architectures, trace how code behaves at runtime, uncover subtle vulnerabilities, and address the systemic flaws behind them.

Embedded in our core engineering team, you’ll help shape security decisions from early design through release and adoption. This is a hands-on engineering and research role: you’ll combine your security expertise