Offensive Security Engineer
ClickHouse2 months ago
Remote, NetherlandsSenior
Responsibilities
- Identify and triage vulnerabilities across ClickHouse web, API, client/server, and low-level memory assets
- Develop and improve penetration testing, vulnerability assessment, bug bounty, and fuzzing programs
- Plan and execute internal red team assessments and penetration tests against infrastructure and cloud environments
- Assess AI/LLM attack surfaces, including prompt injection, model or data exfiltration, and unsafe agentic tool use
- Build and operate agentic reconnaissance, exploit-chaining, attack-path discovery, and LLM-assisted fuzzing tools
- Partner with detection engineering to validate detection coverage and measure control effectiveness and time to detect and respond
- Handle information security events and incidents across ClickHouse products and services
- Develop security processes, tooling, and automation to scale security operations and mitigate business risk
Requirements
- At least 7 years of experience in penetration testing, red teaming, and product security
- Experience conducting threat assessments, security assurance, advisory, and implementation work across distributed web, API, and client/server systems
- Hands-on experience with internal red teaming, penetration testing, and adversary simulation across cloud, network, and application environments
- Ability to design threat-intelligence-grounded adversary scenarios for a multi-tenant cloud data platform
- Strong written and verbal communication skills for translating attack chains into actionable findings
- Experience building or adapting agentic and LLM-assisted tooling for reconnaissance, exploit chaining, and fuzzing
- Familiarity with AI/LLM-specific vulnerability classes and testing methodologies
- Strong knowledge of one or more cloud providers, Kubernetes, and Cilium
- Experience implementing and operating security tools and processes such as static and dynamic code analysis, software composition analysis, SBOM, OWASP SAMM, and fuzzing tools
- Bonus: BS, MS, or PhD in Computer Science or a related field
- Bonus: open-source contributions, cloud or security certifications, AI security harness experience, internal red team tooling experience, or certifications such as OSCP, OSCE, OSEP, or OSWE
Benefits
- Remote-friendly flexible work environment across a globally distributed company operating in more than 20 countries
- Employer healthcare contributions
- Company stock options for every new team member
- Flexible time off in the US and generous entitlement in other countries
- $500 home office setup for remote employees
- Opportunities to participate in company-wide global offsites
Tech Stack
Categories
About ClickHouse
ClickHouse builds an open-source, columnar OLAP database and a managed cloud service for teams that need real-time analytics at scale. The company monetizes through ClickHouse Cloud and commercial support for enterprises running analytics, observability, and AI workloads. Founded in 2021 and headquartered in Palo Alto, it is privately held and serves as the primary commercial steward of the ClickHouse project.