Senior Product Security Engineer

About this role

Help improve the security of ClickHouse Cloud and open-source products by partnering with product and engineering teams. The role combines product security advice and implementation with vulnerability response, security assurance, tooling, automation, and incident handling.

About the company

ClickHouse is a high-performance columnar database built for real-time analytics on large volumes of data.

The team

Security team

Stack

What you'll do

• Partner with product and engineering teams on threat modeling, security assurance, and secure implementation.
• Triage vulnerabilities reported through bug bounty, responsible disclosure, and GitHub Issues.
• Develop security assurance practices, including penetration testing, vulnerability assessments, bug bounty, and fuzzing.
• Drive adoption of static and dynamic analysis, dependency-checking, and license-compliance tools.
• Handle information security events and incidents affecting products and services.
• Build processes, tools, and automation to scale security and reduce business risk.

What we're looking for

• Experience with threat assessments and security assurance across distributed web, API, and client/server systems.
• Knowledge of one or more cloud providers and experience with Kubernetes.
• Experience implementing and operating security tools and processes, such as code analysis, software composition analysis, SBOM, and fuzzing.
• Significant software development and automation experience.
• A security-as-code mindset focused on automation and scale.

Nice to have

• Ability to work with C++ code.
• Experience with Cilium or Crossplane.
• BS, MS, or PhD in Computer Science or a related field.
• Open-source contributions.
• AWS, GCP, Azure, or security certifications.

Benefits

• Stock options for new team members.
• Flexible time off in the US.
• Employer contributions toward healthcare.
• $500 home-office setup allowance for remote employees.
• Opportunities to attend company-wide offsites.