Security Engineer
Metabase · full-time · posted 14 Oct
You came here asking one thing. Salary?
$$$ → ✓
$160,000 to $225,000 per year
Second question — can you apply from where you sit?
Open to U.S.
Compare it with where you sit.
→ inferred locally from your browser clock. nothing is stored.
The actual job
Security Engineer
Metabase
- Engagement
- Full-time
- Posted
- 3 days ago
What the posting asks for
- source code analysis
- offensive product security research
- application security challenges
- Clojure
- AI-assisted security work
Employer text
The posting, in its own words
About the Role
We’re looking for a Security Engineer with deep expertise in source code analysis and offensive product security research. You’ll dig into complex software architectures, trace how code behaves at runtime, uncover subtle vulnerabilities, and address the systemic flaws behind them.
Embedded in our core engineering team, you’ll help shape security decisions from early design through release and adoption. This is a hands-on engineering and research role: you’ll combine your security expertise with frontier AI tools to find vulnerabilities, develop fixes, and make Metabase secure by default across its product, dependencies, and runtime.
Things you’ll do
- Partner with engineers throughout feature development, bringing security expertise to design, implementation, release, and adoption.
- Build security-focused features, lead security improvements across the codebase, and implement fixes that address root causes.
- Use and evaluate advanced AI tools to scale code analysis, vulnerability research, and secure engineering practices.
- Conduct offensive research into Metabase, develop proofs of concept, and validate vulnerabilities.
- Assess findings based on exploitability and real-world impact, define clear remediation criteria, and verify that fixes are effective.
- Turn individual findings into broader improvements that prevent entire classes of vulnerabilities.
What you bring
- A demonstrated track record of finding and exploiting application vulnerabilities through source code analysis and hands-on research.
- The ability to independently navigate unfamiliar codebases, understand complex architectures, and reason about runtime behavior and trust boundaries.
- Experience with application security challenges, including authentication, authorization, injection, and unsafe handling of untrusted data.
- Sound judgment about exploitability and real-world impact, and the ability to communicate findings and remediation options clearly.
- Strong software engineering skills, including the ability to implement durable security fixes. Experience in Clojure, or a strong desire to learn.
- A thoughtful approach to AI-assisted security work, using these tools to extend your expertise while independently validating their output.
- Ownership and curiosity: you pursue difficult questions, collaborate closely with engineers, and follow findings through to resolution.
Onward
More Software Engineering and Development roles with overlapping applicant locations
Senior Corporate Enterprise Platform Engineer, Windows
about 3 hours agoPython · SQL
Requirements: Significant experience engineering and operating Windows endpoint environments, with personal ownership beyond ticket handling or routine console administration.; Requirements: Deep hands-on Intune experience across device lifecycle, configuration and compliance policies, application management, update workflows, and relevant Entra ID dependencies.; Requirements: Strong Windows troubleshooting skills across operating-system behavior, services, logs, networking, certificates, identity, and security controls. Able to distinguish reported management status from actual endpoint health.; Requirements: Recent ownership of Windows and third-party application patching, including staged deployment, user-impact validation, failed-device handling, exceptions, and recovery.; Requirements: Strong practical PowerShell skills and familiarity with at least one additional programming language, such as Python, Go, or C#. Experience building and maintaining production automation or systems integrations.; Requirements: Demonstrated use of version control, code review, automated checks, and controlled deployment for operational changes. Able to explain safe retries, failure handling, secrets management, and configuration drift.; Requirements: Ability to independently define and deliver multi-phase work, prioritize under ambiguity, partner across teams, and mentor other engineers.; Requirements: Clear written and verbal communication, including concise technical decisions, incident updates, runbooks, and effective asynchronous collaboration.; Preferred Qualifications: Production experience with FleetDM on Windows, including agent operations, policies, queries, targeting, API integrations, or configuration managed through GitOps.; Preferred Qualifications: Practical osquery and SQL experience for endpoint inventory, health, or security use cases, including query validation, performance considerations, and handling stale or missing results.; Preferred Qualifications: Experience with infrastructure-as-code or declarative configuration, continuous integration and delivery, and migration or coexistence between endpoint-management platforms.; Preferred Qualifications: Experience with Automox, Patch My PC, or comparable tools, and with endpoint privilege management, application control, encryption, or other security controls.; Preferred Qualifications: Experience supporting developer-heavy, distributed environments and contributing reusable automation across Windows, macOS, or Linux.
Staff Software Engineer
about 4 hours agoJavaScript · Python · Java
Required Qualifications: 9+ years experience in Software Engineering, Computer Science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, Go, Ruby, Rust, or Python (OR Associate’s Degree in Computer Science, Electrical Engineering, Electronics Engineering, Math, Physics, Computer Engineering, Computer Science, or related field AND 8+ years experience in Software Engineering, Computer Science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, Go, Ruby, Rust, or Python; OR Bachelor's Degree in Computer Science or related field AND 7+ years experience in Software Engineering, Computer Science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, Go, Ruby, Rust, or Python; o OR Master's Degree in Computer Science, Electrical Engineering, Electronics Engineering, Math, Physics, Computer Engineering, Computer Science, or related field AND 5+ years experience in Software Engineering, Computer Science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, Go, Ruby, Rust, or Python.; OR Doctorate in Computer Science, Electrical Engineering, Electronics Engineering, Math, Physics, Computer Engineering, Computer Science, or related field AND 3+ years experience in Software Engineering, Computer Science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, Go, Ruby, Rust, or Python.; OR equivalent experience.); Required Qualifications: Demonstrated experience with large-scale system architecture and design, particularly in cloud-based environments, with a strong understanding of distributed systems and microservices.; Preferred Qualifications: Technical leadership experience; Preferred Qualifications: Experience using general purpose programming languages (e.g., Go, Ruby, or a similar language); Preferred Qualifications: Experience in one or more scripting languages (e.g., Bash, Python, or a similar language); Preferred Qualifications: Experience building or operating CI/CD systems at scale
Staff Software Engineer, GitHub Actions
about 4 hours agoJavaScript · Python · Java
Required Qualifications: 9+ years' experience in software engineering, computer science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, Go, Ruby, Rust, Python, JavaScript, C, C++, C#, Java, (OR associate’s degree in Computer Science, Electrical Engineering, Electronics Engineering, Math, Physics, Computer Engineering, Computer Science, or related field AND 8+ years' experience in software engineering, computer science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, Go, Ruby, Rust, Python, JavaScript, C, C++, C#, Java,; OR bachelor's degree in Computer Science or related field AND 7+ years' experience in software engineering, computer science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, Go, Ruby, Rust, Python, JavaScript, C, C++, C#, Java,; OR master's degree in Computer Science, Electrical Engineering, Electronics Engineering, Math, Physics, Computer Engineering, Computer Science, or related field AND 5+ years' experience in software engineering, computer science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, Go, Ruby, Rust, Python, JavaScript, C, C++, C#, Java,; OR doctorate in Computer Science, Electrical Engineering, Electronics Engineering, Math, Physics, Computer Engineering, Computer Science, or related field AND 3+ years' experience in software engineering, computer science, or related technical discipline with proven experience maintaining and delivering production software coding in languages including, but not limited to, Go, Ruby, Rust, Python, JavaScript, C, C++, C#, Java,; OR equivalent experience.); Required Qualifications: Willingness and ability to participate in a rotating on-call schedule, providing 24/7 coverage for 1–2 weeks each quarter.; Preferred Qualifications: 2+ year(s) technical leadership experience; Preferred Qualifications: 3+ years' experience using general purpose programming languages (e.g., Go, Ruby, or a similar language); Preferred Qualifications: 3+ years' experience in one or more scripting languages (e.g., Bash, Python, or a similar language); Preferred Qualifications: Experience building or operating CI/CD systems at scale