Security Engineer: Code & Vulnerability Research (Remote)

Metabase; København; Remote; DKK 1,083,000 - 1,522,000; Full time

Job summary

Metabase, a distributed company delivering data insights, seeks a Security Engineer to perform deep source code analysis and offensive security research. You will work closely with the core engineering team to shape security decisions from design through release and adoption, using frontier AI tools to find vulnerabilities and develop fixes.

This hands-on role emphasizes independent exploration of codebases, evaluating security across product, dependencies, and runtime, with a remote-first,

Qualifications

• Track record of finding and exploiting application vulnerabilities via source code analysis and hands-on research.
• Ability to navigate unfamiliar codebases and reason about runtime behavior and trust boundaries.
• Experience with authentication, authorization, injection, and unsafe handling of untrusted data.
• Judgment about exploitability and clear remediation options.
• Strong software engineering skills and ability to implement durable security fixes; experience in Clojure or willingness to learn.
• AI-assisted security experience, using tools to augment, while validating outputs.
• Ownership and curiosity; collaborate with engineers and follow findings to resolution.

Responsibilities

• Partner with engineers throughout feature development, bringing security expertise to design, implementation, release, and adoption.
• Build security-focused features, lead security improvements across the codebase, and implement fixes that address root causes.
• Use and evaluate advanced AI tools to scale code analysis, vulnerability research, and secure engineering practices.
• Conduct offensive research into Metabase, develop proofs of concept, and validate vulnerabilities.
• Assess findings based on exploitability and real-world impact, define clear remediation criteria, and verify that fixes are effective.
• Turn individual findings into broader improvements that prevent entire classes of vulnerabilities.

Skills

Source code analysis

Offensive security

AI-assisted security

Runtime behavior reasoning

Clojure

App security

Ownership and curiosity

Job description

Metabase, a distributed company delivering data insights, seeks a Security Engineer to perform deep source code analysis and offensive security research. You will work closely with the core engineering team to shape security decisions from design through release and adoption, using frontier AI tools to find vulnerabilities and develop fixes.

This hands-on role emphasizes independent exploration of codebases, evaluating security across product, dependencies, and runtime, with a remote-first,