SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 169,150 - 225,000 / annual
ClickHouse, a Forbes Cloud 100 company and leader in real-time analytics and data warehousing, is seeking an experienced Product Security Engineer to join its Security Team. The role focuses on embedding security into product development and improving the overall security posture of ClickHouse Cloud and open-source offerings.
You will collaborate closely with engineering and product teams to design and implement secure features, including threat modeling, secure architecture reviews, and hands-on implementation guidance. Recent examples include secure key management, passwordless authentication, machine-to-machine authentication, and compute/network/storage isolation.
Key responsibilities include identifying and triaging security vulnerabilities across web, API, and server-client assets (including low-level memory issues); improving security assurance activities through pentests, vulnerability assessments, and fuzzing; and driving adoption of modern security tooling such as Snyk, Semgrep, and GitHub CodeQL. You will also manage information security incidents, develop automation to scale security processes, and nurture the engineering-security relationship.
You bring significant experience supporting engineering teams with threat assessments and security advisory work across distributed systems. You have strong knowledge of cloud platforms (AWS, GCP, Azure), Kubernetes, and container orchestration. You're comfortable implementing and operating security tools, have development and automation experience (C++ preferred), and think in terms of security-as-code with a focus on scalable solutions. Experience with open-source contributions, relevant certifications, or advanced degrees are bonuses.
