← All roles

Offensive Security Engineer

ClickHouse· Security
Apply on company site
Hybrid (Netherlands)Full-timePosted 2mo ago

About the role

Hands-on security practitioner responsible for identifying vulnerabilities, leading offensive security efforts, and driving security tooling and processes to improve ClickHouse's security posture across cloud, on-prem, and AI-related features.

Responsibilities

  • Identify security gaps and vulnerabilities in all ClickHouse offerings triage a wide range of vulnerabilities reported via our bug bounty program, responsible disclosure, GitHub Issues covering web, API and server - client assets including low level memory issues like heap or buffer overflows
  • Improve and develop security assurance activities - pentests, vulnerability assessments, bug bounty programs, fuzzing
  • Plan and execute internal red team assessments and penetration tests against ClickHouse infrastructure, cloud environments, designing realistic adversary scenarios to test detection, response and control effectiveness
  • Assess AI/LLM-specific attack surface across ClickHouse's own AI-powered features and internal AI tooling, including prompt injection, model/data exfiltration, and unsafe agentic tool-use patterns
  • Build and operate agentic tooling for reconnaissance, exploit-chaining and attack-path discovery, and apply LLM-assisted fuzzing to accelerate vulnerability discovery across ClickHouse's products and infrastructure
  • Partner with detection engineering to validate and improve detection coverage during red team exercises, measuring and reporting on control effectiveness and time to detect/respond
  • Handle information security events and incidents across ClickHouse products and services
  • Develop processes, tooling and automation to scale security processes and mitigate risks to the business

Qualifications

  • 7+ years of experience in pentesting, red teaming and product security
  • Experience supporting engineering and product implementation efforts by performing threat assessments, assurance activities, advisory as well as, in some cases, implementation work across distributed systems covering web, API, client/server assets
  • Hands-on experience conducting offensive security engagements - internal red teaming, penetration testing and adversary simulation - across cloud, network and application environments
  • Ability to design adversary scenarios grounded in real threat intelligence (e.g. ransomware operators, supply chain attackers, insider threat) tailored to ClickHouse's risk profile as a multi-tenant cloud data platform
  • Strong written and verbal communication skills, with ability to translate attack chains into clear, actionable findings for engineering and leadership
  • Experience building or adapting agentic and LLM-assisted tooling for offensive security use cases (recon automation, exploit chaining, fuzzing harnesses), with judgment on where AI genuinely speeds up an engagement versus adds noise
  • Familiarity with AI/LLM-specific vulnerability classes and testing methodology
  • Strong knowledge of and experience with one or more cloud service providers (e.g. AWS, GCP, Azure), Kubernetes, Cilium
  • Experience implementing and operating engineering security tools and processes (e.g. static / dynamic code analysis, software composition analysis, SBOM, OWASP SAMM, client and network fuzzing tools)
  • Security as code mindset, with focus on solving problems with automation and scale in mind

Skills

Required:pentestingred teamingthreat modeling / threat assessmentsagentic / LLM-assisted toolingAI/LLM vulnerability awareness

Benefits

  • Flexible work environment
  • Healthcare - Employer contributions towards your healthcare
  • Equity in the company - stock options
  • Time off - Flexible time off in the US, generous entitlement in other countries
  • A $500 Home office setup if you’re a remote employee
  • Global Gatherings – opportunities to engage with colleagues at company-wide offsites
Last updated Aug 5, 2026. Interested? Apply on the company site.
ClickHouse logo

About ClickHouse

Fast Open-Source OLAP DBMS - ClickHouse

ClickHouse is a fast open-source column-oriented database management system that allows generating analytical data reports in real-time using SQL queries

OLAPanalyticsbrex-fastest-growing-2025databasedatasystemsenterprise-infrastructurewing-list-2026wing-list-2026-giga-stage
Company profileWebsite

More open roles at ClickHouse