Senior Product Security Engineer - Remote NL

ClickHouse; Madrid; Remote; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Flexible work environment

Healthcare contributions

Equity in the company

Generous time off

Remote-friendly

Company-wide offsites

Job summary

ClickHouse is seeking an experienced security practitioner to partner with engineering and product teams, driving modern security practices across platforms and services. You will own threat modeling, secure implementation and automated tooling, with a focus on scalable security across distributed systems.

Responsibilities include triaging vulnerabilities, expanding security assurance activities, and enabling engineering teams with tooling such as Snyk, Semgrep and CodeQL to raise the security

Qualifications

• Threat assessments, assurance activities and advisory work across distributed systems.
• Experience with cloud providers (AWS/GCP/Azure), Kubernetes and Cilium.
• Development and automation experience, able to work with C++ code.

Responsibilities

• Collaborate with engineering to improve features with threat modeling and secure implementation.
• Identify security gaps in ClickHouse Cloud and OSS; triage vulnerabilities from bug bounty and reports.
• Improve security assurance activities: pentests, vulnerability assessments, fuzzing.
• Drive security tooling adoption: static/dynamic analysis, SBOM, CodeQL, dependency checks.
• Maintain security relationships with engineering and scale security processes.

Skills

Threat modeling

Cloud security

Kubernetes

Cilium

Code analysis

SBOM / software composition

Automation

C++ development

Education

BS/MS in Computer Science or related field

Security certifications (AWS/GCP/Azure)

Tools

Snyk

Semgrep

GitHub CodeQL

Fuzzing tools

OWASP SAMM

Code licensing compliance

Job description

ClickHouse is seeking an experienced security practitioner to partner with engineering and product teams, driving modern security practices across platforms and services. You will own threat modeling, secure implementation and automated tooling, with a focus on scalable security across distributed systems.

Responsibilities include triaging vulnerabilities, expanding security assurance activities, and enabling engineering teams with tooling such as Snyk, Semgrep and CodeQL to raise the security