Senior Product Security Engineer

ClickHouse
Netherlands
Workplace: RemoteFull timeFunction: CybersecuritySkills: ["Collaboration","Automation","Process improvement"]

Drive product security for ClickHouse Cloud and OSS by collaborating with engineering and product on threat modeling, secure implementation, and security assurance. Triage vulnerabilities from bug bounty and responsible disclosure, improve security testing (pentests, assessments, fuzzing), and scale security processes and automation. Use engineering security tools such as static/dynamic analysis, dependency checks, SBOM, and CodeQL, while handling incidents and strengthening security relationships across teams.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
ClickHouse
ClickHouse
1 month ago

Senior Product Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Drive product security for ClickHouse Cloud and OSS by collaborating with engineering and product on threat modeling, secure implementation, and security assurance. Triage vulnerabilities from bug bounty and responsible disclosure, improve security testing (pentests, assessments, fuzzing), and scale security processes and automation. Use engineering security tools such as static/dynamic analysis, dependency checks, SBOM, and CodeQL, while handling incidents and strengthening security relationships across teams.
Location: Netherlands
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Collaborate with engineering and product to improve existing and build new features with focus on threat modeling, assurance, and secure implementation.
  • •Identify security gaps and vulnerabilities in ClickHouse Cloud and OSS, triage vulnerabilities from bug bounty and responsible disclosure, and handle disclosures through GitHub issues.
  • •Improve and develop security assurance activities including pentests, vulnerability assessments, bug bounty programs, and fuzzing.
  • •Drive implementation and usage of engineering security tools such as static/dynamic code analysis, dependency checks, and code licensing compliance.
  • •Handle information security events and incidents and develop processes, tooling, and automation to scale security and mitigate business risk.

Pay and Benefits

Equity and Bonus:Equity
Perks:Health InsuranceEquityHome OfficeFlexible Time

Key Requirements

  • •Experience supporting engineering and product implementation with threat assessments and security assurance across web and distributed systems.
  • •Strong knowledge of one or more cloud providers (AWS, GCP, Azure), Kubernetes, and Cilium.
  • •Experience implementing and operating engineering security tools and processes such as static/dynamic code analysis, software composition analysis, SBOM, and fuzzing.
  • •Significant development and automation experience, including working with C++ code.
  • •A security-as-code mindset focused on automation and scaling security processes.
Education:
Skills:CollaborationAutomationProcess improvement
Tech Stack:AWSGCPAzureKubernetesCiliumC++Static code analysisDynamic code analysisSoftware composition analysisSBOMOWASP SAMMFuzzingSnykSemgrepGitHub CodeQLPasswordless authenticationThreat modelingSecure key managementSandboxing

Company Brief

ClickHouse
Develops ClickHouse, a high-performance open-source columnar database for real-time analytics, enabling fast querying and processing of large volumes of data for analytics, monitoring, and business intelligence workloads.
Industry: Data Infrastructure
Headquarters: Menlo Park, United States
Founded: 2016
WebsiteLinkedIn