🔥 19 hours ago
As a Senior Security Engineer, you will own endpoint detection and cloud security, lead incident response, and establish security policies to protect Kin's data and systems.
Security Engineer
🕒 5 days ago
Source Code AnalysisOffensive Security ResearchApplication SecurityVulnerability Research
📜 Description
- Partner with engineers on security decisions throughout feature design, implementation, release, and adoption.
- Build security-focused features and lead improvements across the codebase.
- Use and evaluate AI tools to scale code analysis, vulnerability research, and secure engineering practices.
- Conduct offensive research, develop proofs of concept, and validate vulnerabilities.
- Assess exploitability and real-world impact, define remediation criteria, and verify fixes.
- Address root causes and prevent broader classes of vulnerabilities.
🛠️ Requirements
- A demonstrated track record of finding and exploiting application vulnerabilities through source code analysis and hands-on research.
- The ability to independently navigate unfamiliar codebases, understand complex architectures, and reason about runtime behavior and trust boundaries.
- Experience with application security challenges, including authentication, authorization, injection, and unsafe handling of untrusted data.
- Sound judgment about exploitability and real-world impact, and the ability to communicate findings and remediation options clearly.
- Strong software engineering skills, including the ability to implement durable security fixes. Experience in Clojure, or a strong desire to learn.
- A thoughtful approach to AI-assisted security work, using these tools to extend your expertise while independently validating their output.
- Ownership and curiosity: you pursue difficult questions, collaborate closely with engineers, and follow findings through to resolution.
✨ Benefits
- Meaningful equity
- Fully employer-covered medical insurance
- Fully employer-covered dental insurance
- Fully employer-covered vision insurance, with 75% coverage for dependents
- 401(k) with employer match, available to enroll after the first 30 days
- Flexible, unlimited paid time off, including sick time
- Autonomy and an environment that supports growth, learning, and development
Full job description
Metabase is the easiest way for people to get insights from their data, from tiny startups who get up and running quickly to major corporations with tens of thousands of users. That's why people love us.
We bring data tools with the elegance and simplicity of consumer products to the crufty world of enterprise business intelligence. We provide an opinionated open source starting point for how companies should measure, analyze and share their data, which is used by tens of thousands of companies.
Metabase is the easiest way for people to get insights from their data, from tiny startups who get up and running quickly to major corporations with tens of thousands of users. That's why people love us.
We bring data tools with the elegance and simplicity of consumer products to the crufty world of enterprise business intelligence. We provide an opinionated open source starting point for how companies should measure, analyze and share their data, which is used by tens of thousands of companies.
Compensation
The US base salary range for this role is $160K–$225K annually, plus equity and benefits.
Compensation is determined by role, level, location, and individual qualifications, including skills, experience, and scope of responsibility. Pay may vary by geographic location and other job-related factors.
Benefits
We offer meaningful equity and a comprehensive US benefits package, including fully employer-covered medical, dental, and vision insurance (with 75% coverage for dependents), a 401(k) with employer match available to enroll after the first 30 days, flexible and unlimited paid time off including sick time, and an asynchronous, remote-first environment.
We're a global team (50% outside the US), fully distributed (from Thailand to California), who get things done asynchronously, with plenty of uninterrupted time, supporting each other to do the best work of our careers. We offer flexibility (define your own schedule and work from wherever you want), autonomy, and an environment that fosters growth, learning, and development. We're relentlessly user-focused and believe in building long-term value, not short-term hacks. And we raised a $30M Series B to take our approach to the next level for years to come.
For U.S. applicants: Metabase participates in the federal E-Verify program, which confirms employment authorization of newly hired U.S. based employees. E-Verify is not used as a tool to pre-screen candidates and is only initiated upon hire.
E-Verify Participation Notice (English/Spanish)
Right to Work Notice (English/Spanish)
About the Role
We’re looking for a Security Engineer with deep expertise in source code analysis and offensive product security research. You’ll dig into complex software architectures, trace how code behaves at runtime, uncover subtle vulnerabilities, and address the systemic flaws behind them.
Embedded in our core engineering team, you’ll help shape security decisions from early design through release and adoption. This is a hands-on engineering and research role: you’ll combine your security expertise with frontier AI tools to find vulnerabilities, develop fixes, and make Metabase secure by default across its product, dependencies, and runtime.
Things you’ll do
What you bring
Similar jobs
Search more Cybersecurity Engineer jobs
Senior Security Engineer, Threat Detection and Response
🕒 4 days ago
Maleda Tech👥 1 - 10 employees🏢 Information Technology And Services
🕒 4 days ago
Lead threat detection and incident response by investigating incidents, hunting threats, building scalable automation, closing visibility gaps, and driving lasting security improvements across teams.
Senior Security Engineer, Insider Threat Detection & Response
🕒 4 days ago
Maleda Tech👥 1 - 10 employees🏢 Information Technology And Services
🕒 4 days ago
Build and mature insider threat detection and response capabilities by engineering detections, hunting for threats, automating investigations, and coordinating incident response across technical and business teams.
🕒 4 days ago
Own hands-on security across product and infrastructure, from vulnerability management and threat modeling to incident response, cloud hardening, and automation that reduces risk as the platform scales.
Senior Security Engineer, Network & Zero Trust
🕒 5 days ago
Sezzle👥 10,000+ employees🏢 Financial Services
🕒 5 days ago
Own and evolve the network pillar of a zero-trust program across Kubernetes and AWS, implementing segmentation, identity-aware transport, private access, network visibility, and automated controls.