Security Engineer, Metabase
$160-225k
+ Equity
Open-source Business Intelligence tool
Posted today
Open-source Business Intelligence tool
101-200 employees
Posted today
$160-225k
+ Equity
101-200 employees
Company mission
To make an easy, open-source way for everyone in your company to ask questions and learn from data.
Role
Who you are
- A demonstrated track record of finding and exploiting application vulnerabilities through source code analysis and hands-on research
- The ability to independently navigate unfamiliar codebases, understand complex architectures, and reason about runtime behavior and trust boundaries
- Experience with application security challenges, including authentication, authorization, injection, and unsafe handling of untrusted data
- Sound judgment about exploitability and real-world impact, and the ability to communicate findings and remediation options clearly
- Strong software engineering skills, including the ability to implement durable security fixes. Experience in Clojure, or a strong desire to learn
- A thoughtful approach to AI-assisted security work, using these tools to extend your expertise while independently validating their output
- Ownership and curiosity: you pursue difficult questions, collaborate closely with engineers, and follow findings through to resolution
What the job involves
- We’re looking for a Security Engineer with deep expertise in source code analysis and offensive product security research. You’ll dig into complex software architectures, trace how code behaves at runtime, uncover subtle vulnerabilities, and address the systemic flaws behind them
- Embedded in our core engineering team, you’ll help shape security decisions from early design through release and adoption. This is a hands-on engineering and research role: you’ll combine your security expertise with frontier AI tools to find vulnerabilities, develop fixes, and make Metabase secure by default across its product, dependencies, and runtime
- Partner with engineers throughout feature development, bringing security expertise to design, implementation, release, and adoption
- Build security-focused features, lead security improvements across the codebase, and implement fixes that address root causes
- Use and evaluate advanced AI tools to scale code analysis, vulnerability research, and secure engineering practices
- Conduct offensive research into Metabase, develop proofs of concept, and validate vulnerabilities
- Assess findings based on exploitability and real-world impact, define clear remediation criteria, and verify that fixes are effective
- Turn individual findings into broader improvements that prevent entire classes of vulnerabilities
Our take
Metabase is leading a new trend in Business Intelligence tools. Before it, there were big enterprise systems like SAP, and then self-service tools like Tableau and Looker. Now, open-source tools like Metabase are taking the stage, available both as a self-hosting solution and a managed cloud offering.
Metabase's open source nature has helped it build a large and active global community. The company generates revenue through professional services such as managed hosting, support, and assistance with implementing Metabase in custom analytics or business intelligence setups.
It also serves over 85,000 companies worldwide. And now, the challenge for the startup will be capturing significant revenue while continuing to stay true to its open-source principles.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
32% employee growth in 12 months
Company
Funding (2 rounds)
Aug 2021
$30m
SERIES B
Apr 2019
$8m
SERIES A
Total funding: $38m
Company benefits
- Flexible and unlimited time off, including sick days
- Fully remote work environment with flexible working hours. We try to have some overlap time every day, but outside of that, work when and where you work best
- A new MacBook, or another machine of your choice
- $500 ergonomic stipend
- Annual company-wide off-sites
- 100% employer coverage health, dental, and vision insurance 🇺🇸
- 401k 4% match 🇺🇸
Company HQ
Fully remote
Articles
Leadership
Sameer Al-Sakran
(CEO)Graduated from Stanford with an MS in Scientific Computing and Computational Mathematics. Worked as a Software Engineer and Genetic Programming researcher before founding a Facebook Ad Tools startup in 2010. Worked with multiple VCs and startup studios, and lastly Expa from which Metabase was spun out.
Share this job
View 15 more jobs at Metabase