Clickhouse

Senior Product Security Engineer

United States, Remote. Posted 3 months ago

The role

You will support engineering and product teams to improve the security posture of platforms and services. This includes threat modeling, vulnerability triage, and driving the implementation of security tools and automation.

What you will do

  • Collaborate with engineering and product on threat modeling, assurance and secure implementation
  • Identify security gaps and vulnerabilities in ClickHouse Cloud and OSS
  • Triage vulnerabilities reported via bug bounty program, responsible disclosure, and GitHub Issues
  • Improve and develop security assurance activities such as pentests, vulnerability assessments, bug bounty programs, and fuzzing
  • Drive implementation and usage of engineering security tools
  • Nurture the engineering-security relationship
  • Handle information security events and incidents across ClickHouse products and services
  • Develop processes, tooling and automation to scale security processes

Required qualifications

  • Experience supporting engineering and product implementation efforts by performing threat assessments, assurance activities, advisory as well as implementation work across distributed systems
  • Strong knowledge of and experience with one or more cloud service providers (e.g. AWS, GCP, Azure), Kubernetes, Cilium, Crossplane
  • Experience implementing and operating engineering security tools and processes
  • Significant development and automation experience
  • Security as code mindset

Nice to have

  • Ability to work with C++ code
  • BS, MS, or PhD in Computer Science or related field
  • Previous contributions to open source projects
  • Security or cloud related certifications (AWS, GCP, Azure)

Benefits

  • Flexible work environment
  • Employer contributions towards healthcare
  • Stock options
  • Flexible time off in the US, generous entitlement in other countries
  • USD$500 Home office setup if you’re a remote employee
  • Global Gatherings

About the company

ClickHouse is a globally distributed company that is remote-friendly and operates in over 25 countries.