Salary not listed
Offensive Security Engineer
OtherRemote — EMEA
Published on 2026-08-03
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Conduct offensive security work across ClickHouse products, infrastructure, and cloud environments. The role combines vulnerability research, penetration testing, red teaming, and security assurance with building automation and AI-assisted tools to improve security at scale.
About the company
ClickHouse is a high-performance columnar database built for real-time analytics on large volumes of data.
The team
Security Team, covering application, cloud, and enterprise security, incident response, detection, and GRC.
Stack
AWSGCPAzureKubernetesCiliumLLMs
What you'll do
- Triage reported vulnerabilities across web, API, and server-client assets, including memory-safety issues.
- Develop security assurance activities such as penetration tests, vulnerability assessments, bug bounty programs, and fuzzing.
- Plan and run red team assessments and penetration tests across infrastructure and cloud environments.
- Assess AI and LLM attack surfaces, including prompt injection, data exfiltration, and unsafe agentic tool use.
- Build agentic reconnaissance, exploit-chaining, attack-path discovery, and LLM-assisted fuzzing tools.
- Work with detection engineering to test detection coverage and measure response effectiveness.
- Respond to security events and incidents.
- Develop automation and processes to scale security and mitigate business risk.
What we're looking for
- 7+ years of experience in penetration testing, red teaming, and product security.
- Experience with threat assessments and security work across distributed web, API, and client-server systems.
- Hands-on red teaming, penetration testing, and adversary simulation across cloud, network, and application environments.
- Ability to design threat-intelligence-led adversary scenarios relevant to a multi-tenant cloud data platform.
- Strong written and verbal communication skills.
- Experience building or adapting agentic and LLM-assisted offensive security tools; familiarity with AI/LLM vulnerability testing.
- Strong knowledge of at least one major cloud provider, plus Kubernetes and Cilium.
- Experience with security engineering tools and processes, such as code analysis, SCA, SBOM, OWASP SAMM, and fuzzing.
Nice to have
- Degree in Computer Science or a related field.
- Open-source contributions.
- Cloud or security certifications.
- Experience using AI security harnesses for penetration testing.
- Experience building internal red team tooling and infrastructure.
- Offensive security certifications such as OSCP, OSCE, OSEP, or OSWE.
Benefits
- Flexible, remote-friendly work environment.
- Employer contributions toward healthcare.
- Stock options for new team members.
- Flexible time off in the US and generous time off in other countries.
- USD $500 home-office setup allowance for remote employees.
- Company-wide gatherings and offsites.