Product Security Engineer

📋 Description

• Collaborate on threat modeling and secure implementation.
• Identify security gaps in ClickHouse Cloud and OSS; triage bug bounty reports.
• Improve security assurance: pentests, vulnerability assessments, fuzzing.
• Drive security tooling: static and dynamic analysis, SBOM, CodeQL.
• Nurture engineering-security relationships; implement process and tooling improvements.
• Handle information security events and incidents across products.

🎯 Requirements

• Experience supporting engineering/product threat assessments and assurance across distributed systems.
• Strong knowledge of AWS, GCP, Azure, Kubernetes, Cilium.
• Experience implementing/operating security tools: static/dynamic analysis, SCA, SBOM, OWASP SAMM, fuzzing.
• Significant development/automation experience; ability to work with C++ code.
• Security as code mindset; focus on automation and scale.
• Bonus: BS/MS/PhD in CS; open source contributions; security or cloud certifications.

🎁 Benefits

• Flexible work environment; remote-friendly.
• Healthcare benefits provided.
• Company equity via stock options.
• Flexible time off; generous leave in many countries.
• $500 home office setup stipend for remote employees.
• Global gatherings; company-wide offsites.