Senior Offensive Security Engineer – Remote & Equity

ClickHouse; United States; Remote; USD 180,000 - 260,000; Full time

Benefits offered by this job

Flexible work environment

Healthcare

Equity in the company

Time off

Home office setup stipend

Global Gatherings

Job summary

ClickHouse is seeking an experienced Security Practitioner to lead offensive security efforts across our web, API and cloud offerings. You will drive adoption of modern security processes, run red team exercises, and shape detection, response and risk mitigation for a multi-tenant data platform.

Join a remote-friendly team delivering security capabilities across engineering and product teams, with emphasis on adversary simulations, AI/LLM security, and scalable tooling.

Qualifications

• 7+ years in pentesting, red teaming and product security.
• Experience supporting engineering through threat assessments and advisory work across distributed systems.
• Hands-on offensive security engagements across cloud, network and application environments.
• Design adversary scenarios grounded in real threat intel tailored to a multi-tenant cloud platform.
• Strong written and verbal communication translating attack chains into actionable findings.
• Experience building agentic/LLM-assisted tooling for security use cases.
• Familiarity with AI/LLM vulnerability testing methodologies.
• Knowledge of AWS, GCP, Azure and Kubernetes.
• Experience implementing security tools (SCA, SBOM, code analysis) and automation.

Responsibilities

• Identify security gaps and triage vulnerabilities across ClickHouse offerings.
• Lead pentests, vulnerability assessments, bug bounty, and fuzzing programs.
• Plan red team exercises against ClickHouse infrastructure and cloud environments.
• Assess AI/LLM attack surfaces and tooling, including prompt injection risks.
• Develop agentic tooling and apply LLM-assisted fuzzing to accelerate discovery.
• Collaborate with detection engineering to validate coverage and response timing.
• Handle security events and incidents for ClickHouse products and services.
• Build scalable security processes and automation to mitigate business risks.

Skills

Pentesting

Red teaming

Threat modeling

Cloud security

Adversary simulation

Communication

Education

BS in Computer Science

MS/PhD in CS

Tools

AWS

GCP

Azure

Kubernetes

OWASP SAMM

SBOM

Job description

ClickHouse is seeking an experienced Security Practitioner to lead offensive security efforts across our web, API and cloud offerings. You will drive adoption of modern security processes, run red team exercises, and shape detection, response and risk mitigation for a multi-tenant data platform.

Join a remote-friendly team delivering security capabilities across engineering and product teams, with emphasis on adversary simulations, AI/LLM security, and scalable tooling.