Product Security Engineer

📋 Description

• Collaborate with engineering on threat modeling, assurance, and secure implementation.
• Identify security gaps and triage vulnerabilities in Cloud and OSS.
• Improve security assurance activities: pentests, vulnerability assessments, fuzzing.
• Drive security tooling adoption: static/dynamic analysis, SBOM, CodeQL.
• Nurture engineering-security relationships; implement process improvements.
• Handle information security events across ClickHouse products.

🎯 Requirements

• Threat assessments and assurance across distributed web, API, and client/server assets.
• Strong knowledge of cloud providers AWS, GCP, Azure; Kubernetes, Cilium, Crossplane.
• Experience with security tools: static/dynamic analysis, software composition, fuzzing.
• Significant development and automation experience; C++ preferred.
• Security-as-code mindset with automation and scale in mind.
• Experience triaging vulnerabilities and working with bug bounty programs.

🎁 Benefits

• Flexible work environment — remote-friendly, globally distributed.
• Healthcare — employer contributions towards your healthcare.
• Equity in the company — stock options for new team members.
• Time off — flexible time off in the US, generous entitlement elsewhere.
• A $500 Home office setup for remote employees.
• Global Gatherings — company-wide offsites for in-person connection.