Server C++ Engineer

Altinity; San Francisco (CA); On-site; USD 150,000 - 210,000; Full time

Job summary

Altinity, the home of ClickHouse experts, is seeking a server internals engineer to secure and optimize ClickHouse. The role involves designing and implementing security-related DBMS features, from encryption to storage and query processing, with a strong focus on vulnerability analysis and robust fixes.

You will work with the open-source community and Altinity teams to ensure timely resolution of security issues, while supporting ongoing cloud and Kubernetes adaptations for ClickHouse

Qualifications

• Proven experience designing, implementing and testing high-performance DBMS features in a complex C++ codebase.
• Strong background in database internals including query languages, access methods, storage and connectivity.
• Demonstrated ability to read and write good C++.
• Good understanding of networking and I/O on Linux.
• Ability to assess the applicability and severity of newly disclosed vulnerabilities in large software systems and their dependency chains.
• Experience reproducing security issues, performing root cause analysis, and developing robust fixes.
• Familiarity with common vulnerability classes including memory corruption, DoS, privilege escalation, injection vulnerabilities, and information disclosure.
• Familiarity with CVSS scoring, threat modeling, and security risk assessment.
• Understanding of software supply chain security and dependency risk management.

Responsibilities

• Design, implement, and support security features of ClickHouse, including encryption, storage, and query processing.
• Identify, analyze, validate, and resolve security vulnerabilities affecting ClickHouse and its dependencies.
• Collaborate with the open-source community and Altinity engineering teams to address security issues quickly and correctly.
• Help drive ClickHouse security posture as the project evolves toward cloud and Kubernetes deployments.

Skills

DBMS features in C++

Database internals

C++ programming

Linux networking & I/O

Security vulnerability assessment

Root-cause analysis

Vulnerability remediation

Threat modeling

Supply chain security

Job description

ClickHouse is the hottest analytic database on the planet and Altinity is the home of ClickHouse experts who build real-time data solutions that run anywhere. ClickHouse now has more contributors than ElasticSearch, previously the biggest open-source analytic project on GitHub.

Altinity is looking for a great server internals engineer to help maintain and improve the security posture of ClickHouse. As a Server Engineer, you'll be responsible for designing, implementing, and supporting features of ClickHouse ranging from encryption to storage to query processing. The primary focus of this role is identifying, analyzing, validating, and resolving security vulnerabilities that affect ClickHouse and its dependencies. You will work closely with the open-source community and Altinity engineering teams to ensure security issues are addressed quickly and correctly.

We have lots of exciting projects underway as we help the community adapt ClickHouse to the cloud and Kubernetes.

Our ideal candidate has:

• Proven experience in design, implementation, and testing high-performance DBMS features in a complex C++ codebase.
• Excellent background in database internals including query languages, access methods, storage, and/or connectivity
• Demonstrated ability to read and write good C++
• Good understanding of networking and I/O on Linux
• Ability to assess the applicability and severity of newly disclosed vulnerabilities in large software systems and their dependency chains
• Experience reproducing security issues, performing root cause analysis, and developing robust, testable fixes
• Familiarity with common vulnerability classes including memory corruption, denial of service, privilege escalation, authentication bypass, injection vulnerabilities, and information disclosure
• Familiarity with CVSS scoring, threat modeling, and security risk assessment
• Understanding of software supply chain security and dependency risk management