[Remote] Postgres Security Engineer at Supabase

Remote

Supabase Logo
Not SpecifiedCompensation
Senior (5 to 8 years)Experience Level
Full TimeJob Type
UnknownVisa
Technology, DatabaseIndustries

Requirements

  • 5+ years of experience in Postgres security, encryption, RLS, and permissions
  • Deep expertise in PostgreSQL internals
  • Proven experience developing extensions in both C and Rust
  • Strong knowledge of PostgreSQL's permission model and security features, including RLS, roles, and grant systems
  • Experience troubleshooting production issues in managed PostgreSQL environments, diagnosing and resolving complex problems involving custom extensions, performance bottlenecks, and resource contention
  • Comfortable building testing and owning idempotent deployments to many thousands of running Postgres instances
  • Comfortable diving into PostgreSQL source code, understanding the query planner, executor, and storage engine mechanics
  • Previous experience with multi-tenant database architectures and working with PostgreSQL at scale (highly valued)
  • Communicate clearly across both technical and non-technical audiences
  • Experience in async or globally distributed teams
  • Energized by solving real-world problems for developers
  • Comfortable navigating ambiguity and moving quickly

Responsibilities

  • Maintain and expand the security, permissions, and role system of the hosted Postgres offering
  • Work closely with customers, partners, product, engineering, support, and success teams
  • Help maintain a secure, stable, functional Postgres foundation
  • Build developer tools that scale to millions

Skills

Key technologies and capabilities for this role

PostgreSQLPostgres internalsCRustPostgreSQL extensionsRLSpermissionsrolesgrant systemsquery plannerexecutorstorage enginemulti-tenantproduction troubleshootingidempotent deployment

Questions & Answers

Common questions about this position

Is this position remote?

Yes, this is a fully remote position with no Supabase offices, and the company provides a WeWork membership or co-working allowance that can be used anywhere in the world.

What are the key skills required for this Postgres Security Engineer role?

The role requires 5+ years of experience in Postgres security, encryption, RLS, and permissions, deep expertise in PostgreSQL internals, proven experience developing extensions in C and Rust, strong knowledge of PostgreSQL's permission model and security features, and experience troubleshooting production issues in managed PostgreSQL environments.

What benefits does Supabase offer?

Benefits include fully remote work with a co-working allowance, ESOP equity ownership, tech allowance for work setup, 100% health insurance coverage for employees and 80% for dependents, annual off-sites, flexible asynchronous work, and professional development with an annual education allowance.

What is the company culture like at Supabase?

Supabase operates in async, fast-paced, globally distributed teams with a born-remote and open-source-first approach, emphasizing trust in managing your own time, clear communication across audiences, and annual off-sites for connection and collaboration.

What makes a strong candidate for this role?

A strong candidate has 5+ years of Postgres security experience including encryption, RLS, and permissions, communicates clearly across technical and non-technical audiences, thrives in async globally distributed teams, and is energized by solving real-world developer problems while navigating ambiguity quickly.

Supabase

Open-source backend service for developers

About Supabase

Supabase provides an open-source backend as a service (BaaS) platform that helps developers and businesses create scalable applications more easily. It offers real-time databases, authentication, and storage solutions, all designed to integrate smoothly into existing workflows. This means developers can focus on building their applications without needing to spend a lot of time on backend development. Supabase operates on a freemium model, where users can access basic services for free, while advanced features are available through paid subscriptions. This approach allows it to cater to various user needs. What sets Supabase apart from its competitors is its open-source nature, which allows users to customize the platform and benefit from community-driven enhancements. The company aims to provide a reliable and efficient solution for developers, ensuring high uptime for applications that are critical to their users.

Singapore, SingaporeHeadquarters
2020Year Founded
$190.8MTotal Funding
SERIES_CCompany Stage
Consumer Software, Enterprise SoftwareIndustries
51-200Employees

Benefits

Remote work from anywhere
Autonomous work
Health, vision & dental benefits
Generous tech allowance
Annual education allowance
Annual run off-sites

Risks

Increased competition from other open-source BaaS platforms like Appwrite and Nhost.
Potential security vulnerabilities in open-source projects if not regularly updated.
Freemium model may challenge conversion of free users to paid subscribers.

Differentiation

Supabase offers a real-time database with self-documenting APIs for PostgreSQL.
The platform is open-source, allowing for community-driven improvements and customization.
Supabase provides a comprehensive suite of tools for scalable application development.

Upsides

Supabase raised $80M in Series C, totaling $196M in funding.
Growing demand for open-source solutions boosts Supabase's market potential.
Increased interest in real-time data processing aligns with Supabase's capabilities.

Land your dream remote job 3x faster with AI