Security Engineer
This is the employer's own posting, not a copy on a job board.
What we know
Is it still open?
Confirmed still open
Last checked just now — checked against the employer's own applicant tracking system, which is the company answering directly.
We re-read the employer's own applicant tracking system and the posting was still there. That is the company answering directly.
How old is it?
Posted 2h ago
The date the source published, not the day we noticed it (2026-10-14). Last seen at its source just now.
Is it remote?
Global Remote
That is the location the employer filed this posting under. Quoted as written — we do not re-word the source's own location.
Who may apply?
Available worldwide
The description states no restriction of its own. This is the source's own tag.
Pay
$160k–225k/yr
Read out of the job description by us, not from a structured field. Shown in the posting's own currency and period; we never convert.
Carried by 1 source
-
Lever employer's own board first seen 1h ago · last seen just now
The listing
About the Role
We’re looking for a Security Engineer with deep expertise in source code analysis and offensive product security research. You’ll dig into complex software architectures, trace how code behaves at runtime, uncover subtle vulnerabilities, and address the systemic flaws behind them.
Embedded in our core engineering team, you’ll help shape security decisions from early design through release and adoption. This is a hands-on engineering and research role: you’ll combine your security expertise with frontier AI tools to find vulnerabilities, develop fixes, and make Metabase secure by default across its product, dependencies, and runtime.
Things you’ll do
- Partner with engineers throughout feature development, bringing security expertise to design, implementation, release, and adoption.
- Build security-focused features, lead security improvements across the codebase, and implement fixes that address root causes.
- Use and evaluate advanced AI tools to scale code analysis, vulnerability research, and secure engineering practices.
- Conduct offensive research into Metabase, develop proofs of concept, and validate vulnerabilities.
- Assess findings based on exploitability and real-world impact, define clear remediation criteria, and verify that fixes are effective.
- Turn individual findings into broader improvements that prevent entire classes of vulnerabilities.
What you bring
- A demonstrated track record of finding and exploiting application vulnerabilities through source code analysis and hands-on research.
- The ability to independently navigate unfamiliar codebases, understand complex architectures, and reason about runtime behavior and trust boundaries.
- Experience with application security challenges, including authentication, authorization, injection, and unsafe handling of untrusted data.
- Sound judgment about exploitability and real-world impact, and the ability to communicate findings and remediation options clearly.
- Strong software engineering skills, including the ability to implement durable security fixes. Experience in Clojure, or a strong desire to learn.
- A thoughtful approach to AI-assisted security work, using these tools to extend your expertise while independently validating their output.
- Ownership and curiosity: you pursue difficult questions, collaborate closely with engineers, and follow findings through to resolution.
The US base salary range for this role is $160K–$225K annually, plus equity and benefits.
Compensation is determined by role, level, location, and individual qualifications, including skills, experience, and scope of responsibility. Pay may vary by geographic location and other job-related factors.
Benefits
We offer meaningful equity and a comprehensive US benefits package, including fully employer-covered medical, dental, and vision insurance (with 75% coverage for dependents), a 401(k) with employer match available to enroll after the first 30 days, flexible and unlimited paid time off including sick time, and an asynchronous, remote-first environment.