{"id":2556568,"url":"https://alion.io/job/metabase-security-engineer","title":"Security Engineer","company":{"id":16761,"name":"Metabase","domain":"metabase.com","url":"https://alion.io/company/metabase","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"D","score":47,"open_postings":17,"ghost_share":0.882,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":105000,"max_usd":238000,"period":"year","method":"role_country_seniority_unknown","sample_n":3177},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Clojure","optional":false},{"name":"Metabase","optional":false}],"status":"live","first_seen_at":"2026-10-14T16:49:45Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-15T06:47:28Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":0},"description":"About the Role\nWe’re looking for a Security Engineer with deep expertise in source code analysis and offensive product security research. You’ll dig into complex software architectures, trace how code behaves at runtime, uncover subtle vulnerabilities, and address the systemic flaws behind them.\nEmbedded in our core engineering team, you’ll help shape security decisions from early design through release and adoption. This is a hands-on engineering and research role: you’ll combine your security expertise with frontier AI tools to find vulnerabilities, develop fixes, and make Metabase secure by default across its product, dependencies, and runtime.\nThings you’ll do\nPartner with engineers throughout feature development, bringing security expertise to design, implementation, release, and adoption.\nBuild security-focused features, lead security improvements across the codebase, and implement fixes that address root causes.\nUse and evaluate advanced AI tools to scale code analysis, vulnerability research, and secure engineering practices.\nConduct offensive research into Metabase, develop proofs of concept, and validate vulnerabilities.\nAssess findings based on exploitability and real-world impact, define clear remediation criteria, and verify that fixes are effective.\nTurn individual findings into broader improvements that prevent entire classes of vulnerabilities.\nWhat you bring\nA demonstrated track record of finding and exploiting application vulnerabilities through source code analysis and hands-on research.\nThe ability to independently navigate unfamiliar codebases, understand complex architectures, and reason about runtime behavior and trust boundaries.\nExperience with application security challenges, including authentication, authorization, injection, and unsafe handling of untrusted data.\nSound judgment about exploitability and real-world impact, and the ability to communicate findings and remediation options clearly.\nStrong software engineering skills, including the ability to implement durable security fixes. Experience in Clojure, or a strong desire to learn.\nA thoughtful approach to AI-assisted security work, using these tools to extend your expertise while independently validating their output.\nOwnership and curiosity: you pursue difficult questions, collaborate closely with engineers, and follow findings through to resolution.","description_format":"text","description_chars":2376,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["BI & Dashboard Software","Embedded & Customer-Facing Analytics"],"lifecycle":[{"event":"open","at":"2026-10-14T19:24:57Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":2,"green_card_filings_12m":0,"median_offered_wage_usd":177500,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.602,"p_room":1,"age_days":0,"expected_fill_days":23,"reasons":["conf:3","stale_co","win:early"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/metabase-security-engineer","json_url":"https://alion.io/job/metabase-security-engineer.json","meta":{"generated_at":"2026-10-15T08:30:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12748,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":16761},"rest":"https://alion.io/mcp/rest/get_company?id=16761"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmetabase-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmetabase-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmetabase-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/metabase-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmetabase-security-engineer"}]}