Product Security Engineer

ClickHouse is looking for a Product Security Engineer to join their team. The role involves improving existing and building new product features with a focus on threat modeling, assurance, and secure implementation. The successful candidate will drive the adoption of modern security processes and tooling, identify security gaps and vulnerabilities, and handle information security events and incidents.

Requirements

• Experience supporting engineering and product implementation efforts by performing threat assessments, assurance activities, advisory as well as, in some cases, implementation work across distributed systems covering web, API, client/server assets
• Strong knowledge of and experience with one or more cloud service providers (e.g. AWS, GCP, Azure), Kubernetes, Cilium
• Experience implementing and operating engineering security tools and processes (e.g. static / dynamic code analysis, software composition analysis, SBOM, OWASP SAMM, client and network fuzzing tools)
• Significant development and automation experience, ability to work with C++ code
• Security as code mindset, with focus on solving problems with automation and scale in mind

Benefits

• Flexible work environment
• Healthcare
• Equity in the company
• Time off
• $500 Home office setup for remote employees
• Global Gatherings