Senior Product Security Engineer

The role

You will support engineering and product teams to improve the security posture of platforms and services. This includes threat modeling, vulnerability triage, and developing security automation and tooling.

What you will do

• Collaborate with engineering and product on threat modeling, assurance and secure implementation
• Identify security gaps and vulnerabilities in ClickHouse Cloud and OSS
• Triage vulnerabilities reported via bug bounty program, responsible disclosure, and GitHub Issues
• Improve and develop security assurance activities like pentests, vulnerability assessments, and fuzzing
• Drive implementation and usage of engineering security tools
• Nurture the engineering and security relationship
• Handle information security events and incidents across ClickHouse products and services
• Develop processes, tooling and automation to scale security processes

Required qualifications

• Experience supporting engineering and product implementation efforts via threat assessments, assurance activities, and advisory across distributed systems
• Strong knowledge of and experience with one or more cloud service providers (e.g. AWS, GCP, Azure), Kubernetes, Cilium
• Experience implementing and operating engineering security tools and processes
• Significant development and automation experience
• Ability to work with C++ code
• Security as code mindset

Nice to have

• BS, MS, or PhD in Computer Science or related field
• Previous contributions to open source projects
• Security or cloud related certifications (AWS, GCP, Azure)

Benefits

• Flexible work environment
• Employer contributions towards healthcare
• Stock options
• Flexible time off in the US, generous entitlement in other countries
• USD$500 Home office setup for remote employees
• Global Gatherings company-wide offsites

About the company

ClickHouse is a globally distributed company that is remote-friendly and operates in over 25 countries.