Product Security Engineer
ClickHouse2 months ago
Base Salary
$169k - $225k/yr
Responsibilities
- Partner with engineering and product teams on threat modeling, security assurance, and secure implementation of product features
- Identify and triage vulnerabilities in ClickHouse Cloud and open-source ClickHouse, including reports from bug bounty, responsible disclosure, and GitHub Issues
- Improve and develop penetration testing, vulnerability assessment, bug bounty, and fuzzing activities
- Drive adoption and operation of static and dynamic code analysis, dependency checking, and code licensing compliance tools
- Improve the engineering-security relationship through process and technology enhancements
- Handle information security events and incidents across ClickHouse products and services
- Develop security processes, tooling, and automation to scale security operations and mitigate business risk
Requirements
- Experience supporting engineering and product implementation through threat assessments, security assurance, advisory work, and occasional implementation across distributed web, API, and client/server systems
- Strong knowledge of one or more cloud providers and experience with Kubernetes, Cilium, or Crossplane
- Experience implementing and operating security tools and processes including static and dynamic code analysis, software composition analysis, SBOMs, OWASP SAMM, and fuzzing tools
- Significant development and automation experience; C++ experience is preferred
- Ability to apply a security-as-code mindset and solve problems through automation and scale
- A BS, MS, or PhD in Computer Science or a related field is a bonus
- Open-source contributions and security or cloud certifications are bonus qualifications
Benefits
- Remote-friendly flexible work environment across more than 20 countries
- Employer healthcare contributions
- Company stock options
- Flexible time off in the US and generous entitlement in other countries
- $500 home office setup for remote employees
- Opportunities to attend company-wide global gatherings
Tech Stack
Categories
About ClickHouse
ClickHouse builds an open-source, columnar OLAP database and a managed cloud service for teams that need real-time analytics at scale. The company monetizes through ClickHouse Cloud and commercial support for enterprises running analytics, observability, and AI workloads. Founded in 2021 and headquartered in Palo Alto, it is privately held and serves as the primary commercial steward of the ClickHouse project.