Security Engineer: Offensive Security & Code Analysis Remote

Metabase; Finland; Remote; EUR 145,000 - 204,000; Full time

Benefits offered by this job

Equity

Remote-first culture

Professional development

Job summary

Metabase is seeking a Security Engineer with deep expertise in source code analysis and offensive security research. You’ll dig into complex software architectures, trace code behavior at runtime, uncover subtle vulnerabilities, and address systemic flaws behind them.

Embedded in our core engineering team, you’ll shape security decisions from design through release and adoption. This is a hands-on role: you’ll combine security expertise with frontier AI tools to find vulnerabilities, develop

Qualifications

• Proven track record of finding and exploiting application vulnerabilities via code analysis and hands-on research.
• Ability to navigate unfamiliar codebases independently and reason about runtime behavior and trust boundaries.
• Experience with authentication, authorization, injection and handling of untrusted data is preferred.

Responsibilities

• Collaborate with engineers to embed security in design, implementation, release and adoption.
• Build security-focused features and drive improvements across the codebase with durable fixes.
• Leverage AI tools to scale code analysis, vulnerability research and secure engineering practices.
• Perform offensive security research on Metabase, develop PoCs and validate vulnerabilities.
• Assess exploitability and real-world impact; define remediation criteria and verify fixes.
• Translate findings into broad improvements that prevent classes of vulnerabilities.

Skills

Vulnerability research

Source code analysis

Runtime behavior analysis

Security fixes

Clojure

AI-assisted security

Communication of findings

Codebase exploration

Job description

Metabase is seeking a Security Engineer with deep expertise in source code analysis and offensive security research. You’ll dig into complex software architectures, trace code behavior at runtime, uncover subtle vulnerabilities, and address systemic flaws behind them.

Embedded in our core engineering team, you’ll shape security decisions from design through release and adoption. This is a hands-on role: you’ll combine security expertise with frontier AI tools to find vulnerabilities, develop