Remote opportunity at
MetabaseSecurity Engineer
Metabase is a company that develops an open-source business intelligence platform designed to help organizations of all sizes analyze and share data. They are currently seeking…
Career Tools
About This Role
Metabase is a company that develops an open-source business intelligence platform designed to help organizations of all sizes analyze and share data. They are currently seeking a remote, full-time Security Engineer to earn a USD base salary of $160,000 to $225,000 per year. In this role, you will be integrated into the core engineering team as a hands-on researcher and practitioner. Your primary focus will be conducting offensive product security…
Job Description
Metabase is a company that develops an open-source business intelligence platform designed to help organizations of all sizes analyze and share data. They are currently seeking a remote, full-time Security Engineer to earn a USD base salary of $160,000 to $225,000 per year.
In this role, you will be integrated into the core engineering team as a hands-on researcher and practitioner. Your primary focus will be conducting offensive product security research, analyzing source code, and identifying subtle vulnerabilities. You will collaborate closely with other developers to establish durable fixes, address systemic architectural flaws, and utilize advanced artificial intelligence tools to scale code evaluation and secure engineering methodologies.
This position is suited for professionals with deep expertise in application security, source code analysis, and offensive research who enjoy working autonomously in a distributed environment.
Responsibilities
- Collaborate with developers throughout feature lifecycles from initial design to release
- Construct security features and implement fixes that resolve root causes across the codebase
- Evaluate and utilize advanced AI tools to scale code analysis and vulnerability research
- Perform offensive research into Metabase by creating proofs of concept and validating vulnerabilities
- Assess findings based on real-world impact and define clear remediation criteria
- Transform individual security findings into systemic improvements to prevent entire classes of flaws
Requirements
- Demonstrated track record of discovering and exploiting application vulnerabilities via source code analysis and hands-on research
- Ability to independently navigate complex codebases and reason about runtime behavior and trust boundaries
- Experience dealing with application security challenges including authentication, authorization, injection, and unsafe data handling
- Sound judgment regarding exploitability and real-world impact with clear communication skills
- Strong software engineering capabilities to implement durable security fixes
- Ownership and curiosity to pursue difficult questions and follow findings through to resolution
Qualifications
- Experience in Clojure or a strong desire to learn the language
- Experience with AI-assisted security work while independently validating tool outputs
Core Skills
Benefits
- US base salary range of $160,000 to $225,000 annually
- Meaningful equity
- Fully employer-covered medical, dental, and vision insurance with 75 percent coverage for dependents
- 401(k) plan with an employer match available after the first 30 days
- Flexible and unlimited paid time off including sick time
- Asynchronous, remote-first work environment with flexible scheduling
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes, the posting specifies an asynchronous, remote-first environment where team members can work from wherever they want.
What is the salary for the Security Engineer role?
The US base salary range is $160,000 to $225,000 annually, plus equity and benefits.
What programming language experience is preferred?
Experience in Clojure, or a strong desire to learn it, is listed as a qualification for the role.
What benefits are included?
Benefits include fully employer-covered medical, dental, and vision insurance for employees with 75% coverage for dependents, a 401(k) with employer match after 30 days, flexible and unlimited paid time off, and meaningful equity.
What is the employment type?
The posting specifies that this is a full-time position.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.