SRE: Security Focus

Supabase is an Open Source and fully remote company building developer tools for databases.

We are seeking an experienced Site Reliability Engineer to manage the security of our hosted cloud offering, which currently serves over 100k Postgres instances and is growing at a rate of 10% each month. We are custodians of user data and securing their data is fundamental in ensuring users continue to trust us.

You will:

• Help secure the Supabase Cloud offering.
• Constantly improve the baseline security of the product suite by evaluating them from a security-centric perspective and making it part of our software development lifecycle
• Investigate, triage and mitigate attacks on our platform.
• Improve our SOC2 and GDPR offering by building out security features like network restrictions, audit logs, etc.
• Work on our auditor on our annual SOC2 and HIPAA audits
• Collaborate with external penetration testers and engage in ethical hacking to identify vulnerabilities in our system, while conducting regular security audits.
• Oversee our Mobile Device Management (MDM) and manage endpoint security operations.
• Implement and maintain intrusion detection, automated remediation and patch management systems.

You are:

• Passionate about cybersecurity with a keen interest in breaking systems
• The role is going to be SRE heavy but you will also be working with Golang, Typescript, etc for some aspects of the role.
• 5+ years working in the security or SRE domain
• Knowledge of regulatory compliance requirements like SOC2, HIPAA and ISO 27001
• Experience in configuration, troubleshooting and maintenance of the security infrastructure of a fast-growing company

We offer:

• 100% remote work from anywhere in the world. No location-based adjustment to your salary.
• ESOP (equity ownership in the company)
• Autonomous work. We work collaboratively on projects, but you set your own pace.
• Health, Vision and Dental benefits. Supabase covers 100% of the cost for employees and 80% for dependents
• Tech Allowance for any office setup you need
• Annual Education Allowance ($1000)
• Annually run off-sites.

BUILD IN A WEEKEND. SCALE TO BILLIONS

Supabase adds auth, realtime, and restful APIs to Postgres without a single line of code.

Each project within Supabase is an isolated Postgres cluster, allowing customers to scale independently, while still providing the features that you need to build: instant database setup, auth, row level security, realtime data streams, auto-generating APIs, and a simple to use web interface.

We are a fully remote company.

Key Tech: Javascript, Typescript, Go, Elixir, PostgREST (haskell), Postgres, Pulumi.

About the team

• We're a startup. It's unstructured.
• Collectively founded more than a dozen venture-backed companies.
• More than 10 different nationalities.
• We deeply believe in the efficacy of collaborative open source. We support existing communities and tools, rather than building "yet another xx".
• We "dogfood" everything. If you use it in your project, we use it in Supabase.

Process

• The entire process is fully remote and all communication will happen over email or via video chat.
• Once you've submitted your application, the team will review your submission, and may reach out for a short screening interview over video call.
• If you pass the screen you will be invited to up to four follow up interviews. The calls:
  • usually take between 20-45 minutes each depending on the interviewer.
  • are all 1:1.
  • will be with both founders, a member of either the growth or engineering team (depending on the role), and usually one other person from your immediate team or function.
• Once the interviews are over, the team will meet to discuss several roles and candidates and may:
  • ask one or two follow-up questions over email or a quick call.
  • go directly to making an offer.