Product Security Engineer: Secure Cloud & Apps (Remote)

ClickHouse, Inc.; United States; On-site; USD 169,150 - 225,000; Full time

Benefits offered by this job

Flexible work environment

Healthcare

Stock options

Flexible time off

Home office stipend

Global gatherings

Job summary

ClickHouse, Inc. seeks an experienced security practitioner to partner with engineering and product teams to harden our platform.

You will drive threat modeling, secure implementation, and assurance activities across ClickHouse Cloud and OSS, triaging vulnerabilities and building scalable security tooling. This role emphasizes automation and security-as-code, with hands-on work on memory-safety, fuzzing, and code analysis.

Qualifications

• Threat assessments and assurance activities across distributed systems.
• Experience with web, API, and distributed services security.
• Familiarity with memory safety, fuzzing, and vulnerability management.

Responsibilities

• Collaborate with engineering and product on improving product features with focus on threat modeling, assurance and secure implementation.
• Identify security gaps and vulnerabilities in ClickHouse Cloud and OSS; triage bugs from bounty, disclosure, and GitHub issues.
• Improve security assurance activities: pentests, vulnerability assessments, fuzzing.
• Drive implementation and usage of security tools: static/dynamic analysis, dependency checks, SBOM, code licensing compliance (Snyk, Semgrep, GitHub CodeQL).
• Nurture the engineering-security relationship and drive process improvements.
• Handle information security events across ClickHouse products and services.
• Develop tooling and automation to scale security processes and mitigate business risks.

Skills

Threat modeling

Security architecture

Automation & scripting

Cloud security

Collaboration with engineering

Education

BS/MS/PhD in Computer Science or related field

Tools

Snyk

Semgrep

GitHub CodeQL

Job description

ClickHouse, Inc. seeks an experienced security practitioner to partner with engineering and product teams to harden our platform.

You will drive threat modeling, secure implementation, and assurance activities across ClickHouse Cloud and OSS, triaging vulnerabilities and building scalable security tooling. This role emphasizes automation and security-as-code, with hands-on work on memory-safety, fuzzing, and code analysis.