Product Security Engineer
ClickHouse2 months ago
Remote, NetherlandsSenior
Responsibilities
- Partner with engineering and product teams on threat modeling, security assurance, and secure implementation of new and existing product features.
- Identify, assess, and triage vulnerabilities across ClickHouse Cloud and open-source products, including web, API, server-client, heap, and buffer-overflow issues.
- Develop and improve penetration testing, vulnerability assessment, bug bounty, and fuzzing programs.
- Drive adoption of static and dynamic code analysis, dependency checking, and code licensing compliance tools.
- Use and support tools such as Snyk, Semgrep, and GitHub CodeQL.
- Strengthen collaboration between engineering and security by implementing process and technology improvements.
- Handle information security events and incidents across ClickHouse products and services.
- Develop scalable security processes, tooling, and automation to mitigate business risk.
Requirements
- Experience supporting engineering and product implementation through threat assessments, security assurance, advisory work, and implementation across distributed web, API, and client/server systems.
- Strong knowledge of and experience with one or more cloud service providers, Kubernetes, and Cilium.
- Experience implementing and operating engineering security tools and processes, including code analysis, software composition analysis, SBOM, OWASP SAMM, and fuzzing tools.
- Significant development and automation experience, including the ability to work with C++ code.
- Security-as-code mindset focused on automation, scalability, and risk reduction.
- Experience with AWS, GCP, or Azure is applicable.
- Bonus: BS, MS, or PhD in Computer Science or a related field.
- Bonus: Contributions to open-source projects.
- Bonus: Security- or cloud-related certifications, including AWS, GCP, or Azure certifications.
Benefits
- Fully remote anywhere in the Netherlands
- Flexible work environment at a globally distributed, remote-friendly company
- Employer healthcare contributions
- Company stock options
- Flexible time off in the US and generous entitlement in other countries
- $500 home office setup for remote employees
- Opportunities to attend company-wide global offsites
Tech Stack
Categories
About ClickHouse
ClickHouse builds an open-source, columnar OLAP database and a managed cloud service for teams that need real-time analytics at scale. The company monetizes through ClickHouse Cloud and commercial support for enterprises running analytics, observability, and AI workloads. Founded in 2021 and headquartered in Palo Alto, it is privately held and serves as the primary commercial steward of the ClickHouse project.