SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
ClickHouse, a Forbes Cloud 100 company and leader in real-time analytics and data warehousing, is seeking an experienced Product Security Engineer to join its Security Team. The role focuses on driving modern security practices across the organization while supporting engineering and product teams in building secure platforms and services.
You will collaborate closely with engineering and product teams on threat modeling, security assurance, and secure implementation of features such as key management, passwordless authentication, m2m authentication, and compute/network/storage isolation. You'll identify and triage security vulnerabilities in ClickHouse Cloud and open-source offerings, covering web, API, server-client assets, and low-level memory issues like heap or buffer overflows reported through bug bounty programs and responsible disclosure channels.
Key responsibilities include improving security assurance activities (pentests, vulnerability assessments, fuzzing), implementing and scaling engineering security tools (Snyk, Semgrep, GitHub CodeQL), and developing processes and automation to mitigate business risks. You'll handle information security incidents, nurture the engineering-security relationship, and drive technology and process improvements.
You bring significant experience supporting engineering efforts through threat assessments and advisory work on distributed systems. Strong knowledge of cloud providers (AWS, GCP, Azure), Kubernetes, and Cilium is essential. You have hands-on experience with engineering security tools, static/dynamic code analysis, software composition analysis, and SBOM practices. Development and automation skills with C++ code proficiency are required, along with a security-as-code mindset focused on automation and scale.
