1 day ago

Product Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 22 hours agoStatus: Live

Job Summary

Own product security across ClickHouse Cloud and OSS by partnering with engineering and product on threat modeling, assurance, and secure implementation. Triage vulnerabilities from bug bounty, disclosure, and GitHub issues, conduct pentests and fuzzing, and improve security processes with tooling such as Snyk, Semgrep, and GitHub CodeQL. Contribute to incident response and build automation to scale security while improving the security posture of platforms and services.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Collaborate with engineering and product to build secure features, including threat modeling, assurance, and secure implementation (e.g., key management, passwordless and m2m authentication, sandboxing, isolation).
•Identify security gaps and triage vulnerabilities across ClickHouse Cloud and OSS, covering web, API, and server-client assets including memory issues.
•Improve security assurance activities including pentests, vulnerability assessments, bug bounty programs, and fuzzing.
•Drive adoption of engineering security tools and processes such as static/dynamic code analysis, dependency checks, and code licensing compliance (Snyk, Semgrep, GitHub CodeQL).
•Handle information security events and incidents, and develop process automation to scale security practices and mitigate business risk.

Pay and Benefits

Salary: USD 169,150 - 191,250 annually

Perks:Health InsuranceEquityHome OfficeRemote Work

Key Requirements

•Experience supporting engineering and product implementation with threat assessments and security assurance across distributed systems (web, APIs, client/server assets).
•Strong knowledge of one or more cloud providers (AWS, GCP, Azure) and experience with Kubernetes plus Cilium/Crossplane.
•Experience implementing and operating engineering security tools and processes such as static/dynamic code analysis, software composition analysis, SBOM, OWASP SAMM, and fuzzing tools.
•Significant development and automation experience, with ability to work with C++ code preferred.
•Security as code mindset focused on automation and scaling security processes and risk mitigation.

Experience:CloudDistributed systemsOpen source

Education:Bachelor's in Computer Science or related field

Skills:CollaborationProblem-solvingProcess improvementAutomationRisk mitigation

Certifications:AWSGCPAzure

Languages:English

Tech Stack:AWSGCPAzureKubernetesCiliumCrossplaneSnykSemgrepGitHub CodeQLStatic code analysisDynamic code analysisDependency checksCode licensing complianceSBOMOWASP SAMMSoftware composition analysisFuzzingC++Threat modelingPasswordless authentication

Company Brief

ClickHouse

Develops ClickHouse, a high-performance open-source columnar database for real-time analytics, enabling fast querying and processing of large volumes of data for analytics, monitoring, and business intelligence workloads.

Industry: Data Infrastructure

Headquarters: Menlo Park, United States

Founded: 2016

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

ClickHouse

1 day ago

Product Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 22 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Collaborate with engineering and product to build secure features, including threat modeling, assurance, and secure implementation (e.g., key management, passwordless and m2m authentication, sandboxing, isolation).
•Identify security gaps and triage vulnerabilities across ClickHouse Cloud and OSS, covering web, API, and server-client assets including memory issues.
•Improve security assurance activities including pentests, vulnerability assessments, bug bounty programs, and fuzzing.
•Drive adoption of engineering security tools and processes such as static/dynamic code analysis, dependency checks, and code licensing compliance (Snyk, Semgrep, GitHub CodeQL).
•Handle information security events and incidents, and develop process automation to scale security practices and mitigate business risk.

Pay and Benefits

Salary: USD 169,150 - 191,250 annually

Perks:Health InsuranceEquityHome OfficeRemote Work

Key Requirements

•Experience supporting engineering and product implementation with threat assessments and security assurance across distributed systems (web, APIs, client/server assets).
•Strong knowledge of one or more cloud providers (AWS, GCP, Azure) and experience with Kubernetes plus Cilium/Crossplane.
•Experience implementing and operating engineering security tools and processes such as static/dynamic code analysis, software composition analysis, SBOM, OWASP SAMM, and fuzzing tools.
•Significant development and automation experience, with ability to work with C++ code preferred.
•Security as code mindset focused on automation and scaling security processes and risk mitigation.

Experience:CloudDistributed systemsOpen source

Education:Bachelor's in Computer Science or related field

Skills:CollaborationProblem-solvingProcess improvementAutomationRisk mitigation

Certifications:AWSGCPAzure

Languages:English

Company Brief

ClickHouse

Industry: Data Infrastructure

Headquarters: Menlo Park, United States

Founded: 2016

Website LinkedIn