Offensive Security Engineer

The role

You will identify security gaps and vulnerabilities in ClickHouse offerings and conduct red team assessments. You will also build agentic tooling for reconnaissance and exploit-chaining to improve security posture.

What you will do

• Identify security gaps and vulnerabilities in all ClickHouse offerings
• Triage vulnerabilities from bug bounty, responsible disclosure, and GitHub Issues
• Improve and develop security assurance activities like pentests and fuzzing
• Plan and execute internal red team assessments and penetration tests
• Assess AI/LLM-specific attack surface across features and internal tooling
• Build and operate agentic tooling for reconnaissance and exploit-chaining
• Partner with detection engineering to validate and improve detection coverage
• Handle information security events and incidents
• Develop processes, tooling and automation to scale security processes

Required qualifications

• 7+ years of experience in pentesting, red teaming and product security
• Experience supporting engineering and product implementation efforts via threat assessments and assurance activities
• Hands-on experience conducting offensive security engagements across cloud, network and application environments
• Ability to design adversary scenarios grounded in real threat intelligence
• Strong written and verbal communication skills
• Experience building or adapting agentic and LLM-assisted tooling for offensive security use cases
• Familiarity with AI/LLM-specific vulnerability classes and testing methodology
• Strong knowledge of and experience with one or more cloud service providers (e.g. AWS, GCP, Azure), Kubernetes, Cilium
• Experience implementing and operating engineering security tools and processes
• Security as code mindset

Nice to have

• BS, MS, or PhD in Computer Science or related field
• Previous contributions to open source projects
• Security or cloud related certifications (AWS, GCP, Azure)
• Previous experience in using AI security harnesses for pentesting purposes
• Experience building or operating internal red team tooling and infrastructure from scratch
• Offensive security certifications (e.g. OSCP, OSCE, OSEP, OSWE)

Benefits

• Flexible work environment
• Employer contributions towards healthcare
• Stock options
• Flexible time off in the US, generous entitlement in other countries
• USD$500 Home office setup for remote employees
• Global Gatherings

About the company

ClickHouse is a globally distributed company that is remote-friendly and operates in over 25 countries.