← All roles

Senior Product Security Engineer

ClickHouse· Security
Apply on company site
Hybrid (United States)$169.2k - $191.3kFull-timePosted 2mo ago

About the role

Senior security engineer focused on product security for ClickHouse Cloud and OSS, driving threat modeling, secure implementation, security assurance activities, and automation to scale security across engineering and product teams.

Responsibilities

  • Collaborate with engineering and product on improving existing and building new product features with focus on threat modeling, assurance and secure implementation, including secure key management, passwordless authentication, m2m authentication, sandboxing and compute/network/storage isolation
  • Identify security gaps and vulnerabilities in ClickHouse Cloud and OSS, triage vulnerabilities from bug bounty, responsible disclosure, GitHub Issues across web, API and server-client assets including low level memory issues
  • Improve and develop security assurance activities - pentests, vulnerability assessments, bug bounty programs, fuzzing
  • Drive implementation and usage of engineering security tools - static, dynamic code analysis, dependency checks, code licensing compliance (Snyk, Semgrep, GitHub CodeQL)
  • Nurture the engineering-security relationship, identify and implement process and technology improvements
  • Handle information security events and incidents across ClickHouse products and services
  • Develop processes, tooling and automation to scale security processes and mitigate risks to the business

Qualifications

  • Experience supporting engineering and product implementation efforts by performing threat assessments, assurance activities, advisory as well as, in some cases, implementation work across distributed systems covering web, API, client/server assets
  • Strong knowledge of and experience with one or more cloud service providers (e.g. AWS, GCP, Azure), Kubernetes, Cilium, Crossplane
  • Experience implementing and operating engineering security tools and processes (e.g. static / dynamic code analysis, software composition analysis, SBOM, OWASP SAMM, client and network fuzzing tools)
  • Significant development and automation experience, ability to work with C++ code preferred
  • Security as code mindset, with focus on solving problems with automation and scale in mind

Skills

Required:Threat modelingSecurity assuranceStatic code analysisDynamic code analysis

Benefits

  • Flexible work environment - remote-friendly, globally distributed
  • Healthcare - employer contributions towards healthcare
  • Equity in the company - stock options
  • Time off - flexible time off in the US, generous entitlement in other countries
  • A $500 Home office setup for remote employees
  • Global Gatherings – opportunities to engage with colleagues at company-wide offsites
Last updated Aug 5, 2026. Interested? Apply on the company site.
ClickHouse logo

About ClickHouse

Fast Open-Source OLAP DBMS - ClickHouse

ClickHouse is a fast open-source column-oriented database management system that allows generating analytical data reports in real-time using SQL queries

OLAPanalyticsbrex-fastest-growing-2025databasedatasystemsenterprise-infrastructurewing-list-2026wing-list-2026-giga-stage
Company profileWebsite

More open roles at ClickHouse