Security Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Collaborate with engineers throughout the feature development process, providing security expertise during design, implementation, release, and adoption.

• Create security-oriented features and spearhead security enhancements across the codebase.

• Execute fixes that tackle root causes effectively.

• Utilize and assess advanced AI tools to scale code analysis, vulnerability research, and secure engineering practices.

• Perform offensive research on Metabase.

• Develop proofs of concept and confirm vulnerabilities.

• Evaluate findings based on exploitability and real-world implications.

• Establish clear remediation criteria and ensure the effectiveness of fixes.

• Transform individual findings into comprehensive enhancements to prevent entire categories of vulnerabilities.

• Influence security decisions from the initial design phase through to release and adoption.

⛳️ Requirements

• Proven history of identifying and exploiting application vulnerabilities through source code analysis and practical research.

• Capability to independently maneuver through unfamiliar codebases, comprehend complex architectures, and analyze runtime behavior and trust boundaries.

• Familiarity with application security challenges, such as authentication, authorization, injection, and improper handling of untrusted data.

• Sound judgment regarding exploitability and real-world consequences.

• Proficient in clearly communicating findings and remediation suggestions.

• Strong software engineering abilities, including the capacity to implement sustainable security fixes.

• Experience in Clojure, or a strong eagerness to learn.

• A thoughtful approach to AI-assisted security tasks, independently verifying AI tool outputs.

• A sense of ownership and curiosity; ability to tackle challenging questions, work closely with engineers, and see findings through to resolution.

🏝️ Benefits

• Meaningful equity.

• Fully employer-covered medical, dental, and vision insurance.

• 75% coverage for dependents.

• 401(k) with employer match available after the first 30 days.

• Flexible and unlimited paid time off, including sick leave.

• Asynchronous, remote-first work environment.

• Flexible schedule.

• Work from anywhere you choose.

• Autonomy.

• Opportunities for growth, learning, and development.