Product Security Engineer

Stack

Responsibilities

• ▹Collaborate with engineering and product on threat modeling and secure implementation of new and existing features
• ▹Identify security gaps and vulnerabilities in ClickHouse Cloud and OSS
• ▹Triage vulnerabilities reported via the bug bounty program, responsible disclosure, and GitHub Issues
• ▹Improve and develop security assurance activities: pentests, vulnerability assessments, fuzzing
• ▹Drive implementation and usage of engineering security tools (static/dynamic code analysis, dependency checks, license compliance)
• ▹Handle information security events and incidents across ClickHouse products and services
• ▹Develop processes, tooling, and automation to scale security processes and mitigate risk

Requirements

• ▹Experience supporting engineering and product teams with threat assessments, assurance activities, and advisory work
• ▹Strong knowledge of one or more cloud providers (AWS, GCP, Azure), Kubernetes, Cilium, Crossplane
• ▹Experience implementing and operating engineering security tools and processes (static/dynamic analysis, SBOM, OWASP SAMM, fuzzing)
• ▹Significant development and automation experience; ability to work with C++ code preferred
• ▹Security-as-code mindset focused on automation and scale

Nice to have

• ▹BS, MS, or PhD in Computer Science or a related field
• ▹Previous contributions to open source projects
• ▹Security or cloud certifications (AWS, GCP, Azure)

Soft skills

What we offer

• ▹Flexible, globally distributed, remote-friendly environment across 20+ countries
• ▹Employer contributions towards healthcare
• ▹Equity for every new team member
• ▹Flexible time off
• ▹$500 home office setup for remote employees
• ▹Company-wide offsites and gatherings

About the company

ClickHouse leads the market in real-time analytics, data warehousing, and observability, with more than 3,000 customers and a $400M Series D financing round.