Metabase Jobs

About the Role

Things you’ll do

Partner with engineers throughout feature development, bringing security expertise to design, implementation, release, and adoption.
Build security-focused features, lead security improvements across the codebase, and implement fixes that address root causes.
Use and evaluate advanced AI tools to scale code analysis, vulnerability research, and secure engineering practices.
Conduct offensive research into Metabase, develop proofs of concept, and validate vulnerabilities.
Assess findings based on exploitability and real-world impact, define clear remediation criteria, and verify that fixes are effective.
Turn individual findings into broader improvements that prevent entire classes of vulnerabilities.

What you bring

A demonstrated track record of finding and exploiting application vulnerabilities through source code analysis and hands-on research.
The ability to independently navigate unfamiliar codebases, understand complex architectures, and reason about runtime behavior and trust boundaries.
Experience with application security challenges, including authentication, authorization, injection, and unsafe handling of untrusted data.
Sound judgment about exploitability and real-world impact, and the ability to communicate findings and remediation options clearly.
Strong software engineering skills, including the ability to implement durable security fixes. Experience in Clojure, or a strong desire to learn.
A thoughtful approach to AI-assisted security work, using these tools to extend your expertise while independently validating their output.
Ownership and curiosity: you pursue difficult questions, collaborate closely with engineers, and follow findings through to resolution.