Security Engineer

supabase

2 months ago

Worldwide

Supabase is an Open Source and fully remote company building developer tools for databases.

We are seeking an experienced Security Developer to manage the security of our hosted cloud offering. We currently manage over 1M Postgres instances and are growing fast. We are custodians of user data; securing their data is fundamental in ensuring users trust us.

You will

  • Help secure the Supabase Cloud offering.
  • Constantly improve the baseline security of the product suite by evaluating them from a security-centric perspective and making it part of our software development lifecycle
  • Investigate, triage and mitigate attacks on our platform
  • Improve our SOC2 and HIPAA offering by improving our product features like network restrictions, audit logs, etc
  • Work on our auditor on our annual SOC2 and HIPAA audits
  • Collaborate with external penetration testers and engage in ethical hacking to identify vulnerabilities in our system, while conducting regular security audits.
  • Oversee our Mobile Device Management (MDM) and manage endpoint security operations.
  • Implement and maintain our bug bounty program.

You are

  • Passionate about cybersecurity with a keen interest in breaking systems.
  • 5+ years working in the security domain
  • Knowledge of regulatory compliance requirements like SOC2, HIPAA and ISO 27001
  • Experience in configuration, troubleshooting, and maintenance of the security infrastructure of a fast-growing company
  • Experience with application penetration testing is a plus

We offer:

  • 100% remote work from anywhere in the world. No location-based adjustment to your salary.
  • ESOP (equity ownership in the company)
  • Autonomous work. We work collaboratively on projects, but you set your own pace.
  • Health, Vision and Dental benefits. Supabase covers 100% of the cost for employees and 80% for dependents
  • Tech Allowance for any office setup you need
  • Annual Education Allowance ($1000)
  • Annually run off-sites.