7 hours ago
Base Salary
$160k - $225k/yr
Responsibilities
- Partner with engineers throughout feature development to provide security guidance from design through release and adoption.
- Build security-focused features and implement durable fixes that address root causes across the codebase.
- Use and evaluate AI tools for code analysis, vulnerability research, and secure engineering.
- Conduct offensive security research, develop proofs of concept, and validate vulnerabilities.
- Assess exploitability and real-world impact, define remediation criteria, and verify fixes.
- Turn individual security findings into broader improvements that prevent classes of vulnerabilities.
Requirements
- Demonstrated experience finding and exploiting application vulnerabilities through source-code analysis and hands-on research.
- Ability to navigate unfamiliar codebases, understand complex architectures, and reason about runtime behavior and trust boundaries.
- Experience with application security issues including authentication, authorization, injection, and unsafe handling of untrusted data.
- Sound judgment regarding exploitability and impact, with the ability to communicate findings and remediation options clearly.
- Strong software engineering skills and ability to implement durable security fixes.
- Experience with Clojure or strong willingness to learn it.
- Ability to use AI-assisted security tools thoughtfully while independently validating their output.
- Ownership, curiosity, and ability to collaborate closely with engineers through resolution.
Benefits
- US base salary range of $160K–$225K annually, plus equity and benefits.
- Fully employer-covered medical, dental, and vision insurance, with 75% dependent coverage.
- 401(k) with employer match available after the first 30 days.
- Flexible and unlimited paid time off, including sick time.
- Fully distributed, remote-first, asynchronous work environment with flexible scheduling and location.
- Autonomy and opportunities for growth, learning, and development.
Tech Stack
Clojure
Categories
About Metabase
Metabase builds an open-source business intelligence and analytics platform that lets non-technical users query databases, build dashboards, and share insights. It monetizes through paid Pro/Enterprise features and a hosted Metabase Cloud service for teams that prefer not to self-host. Founded in 2014 and privately held, the company is headquartered in Spring Valley, California, and serves organizations ranging from startups to large enterprises across industries.