About the company
Metabase is the easiest way for people to get insights from their data, from tiny startups to major corporations with tens of thousands of users.
Responsibilities
- Partner with engineers throughout feature development, bringing security expertise to design, implementation, release, and adoption
- Build security-focused features, lead security improvements across the codebase, and implement fixes that address root causes
- Use and evaluate advanced AI tools to scale code analysis, vulnerability research, and secure engineering practices
- Conduct offensive research into Metabase, develop proofs of concept, and validate vulnerabilities
- Assess findings based on exploitability and real-world impact, define clear remediation criteria, and verify that fixes are effective
- Turn individual findings into broader improvements that prevent entire classes of vulnerabilities
Requirements
- A demonstrated track record of finding and exploiting application vulnerabilities through source code analysis and hands-on research
- The ability to independently navigate unfamiliar codebases and reason about runtime behavior and trust boundaries
- Experience with application security challenges, including authentication, authorization, injection, and unsafe handling of untrusted data
- Strong software engineering skills, including the ability to implement durable security fixes
- Experience in Clojure, or a strong desire to learn
- A thoughtful approach to AI-assisted security work
Conditions