Senior Product Security Engineer - Remote NL | Equity

ClickHouse, Inc.; Northern (KY); Hybrid; USD 81,000 - 128,000; Full time

Benefits offered by this job

Flexible work environment

Healthcare

Equity in the company

Time off

USD$500 Home office setup

Global Gatherings

Job summary

ClickHouse, Inc. is seeking a hands-on security practitioner to drive modern security processes and tooling, partnering with engineering and product teams to improve platform security. The role focuses on threat modeling, secure implementations, and incident response across ClickHouse Cloud and OSS.

You will work with AWS/GCP/Azure, Kubernetes, and security tooling to automate security at scale. The candidate should bring experience in C++ development and a security-as-code mindset with a track

Qualifications

• Experience performing threat assessments and assurance activities across distributed systems.
• Strong knowledge of cloud providers (AWS, GCP, Azure) and Kubernetes.
• Experience implementing engineering security tools (static/dynamic code analysis, SBOM, OWASP SAMM).
• Significant development and automation experience, including C++ code.
• Security as code mindset with automation at scale.

Responsibilities

• Collaborate with engineering and product to improve security features and secure implementations (threat modeling, assurance, and sandboxing).
• Identify security gaps in ClickHouse Cloud and OSS, triage vulnerabilities from bug bounty and reports.
• Improve security assurance activities: pentests, vulnerability assessments, fuzzing.
• Drive usage of engineering security tools (static/dynamic analysis, SBOM, code licensing checks).
• Nurture security relationships across engineering and product teams.

Skills

Threat modeling

Security assurance

Advisory services

Cloud providers (AWS GCP Azure)

Kubernetes

Cilium

Code analysis

SBOM

OWASP SAMM

Fuzzing

C++ development

Automation

Education

BS/MS/PhD in Computer Science or related field

Security or cloud certifications (AWS GCP Azure)

Tools

Snyk

Semgrep

GitHub CodeQL

Job description

ClickHouse, Inc. is seeking a hands-on security practitioner to drive modern security processes and tooling, partnering with engineering and product teams to improve platform security. The role focuses on threat modeling, secure implementations, and incident response across ClickHouse Cloud and OSS.

You will work with AWS/GCP/Azure, Kubernetes, and security tooling to automate security at scale. The candidate should bring experience in C++ development and a security-as-code mindset with a track