Senior Product Security Engineer

About this role

Drive product security across ClickHouse Cloud and its open-source software, partnering with engineering and product teams on secure design and implementation. The role combines threat modeling, vulnerability response, security assurance, automation, and incident handling.

About the company

ClickHouse is a high-performance columnar database built for real-time analytics on large volumes of data.

The team

Security Team

Stack

What you'll do

• Partner with engineering and product teams on threat modeling, security assurance, and secure implementation.
• Triage vulnerabilities reported through bug bounty, responsible disclosure, and GitHub Issues.
• Improve penetration testing, vulnerability assessments, bug bounty, and fuzzing activities.
• Implement and promote code analysis, dependency checking, and license-compliance tools.
• Handle information security events and incidents across products and services.
• Build processes, tooling, and automation to scale security and reduce risk.

What we're looking for

• Experience conducting threat assessments and security assurance for distributed systems across web, API, and client/server assets.
• Strong knowledge of at least one cloud provider and experience with Kubernetes and Cilium.
• Experience implementing and operating engineering security tools and processes, such as code analysis, SCA, SBOM, and fuzzing.
• Significant development and automation experience, including ability to work with C++ code.
• An automation-focused security-as-code mindset.

Nice to have

• BS, MS, or PhD in Computer Science or a related field.
• Open-source project contributions.
• Cloud or security certifications from AWS, GCP, or Azure.

Benefits

• Company stock options.
• Employer contributions toward healthcare.
• Flexible time off, with generous entitlement outside the US.
• USD $500 home-office setup allowance for remote employees.
• Company-wide gatherings and offsites.