Description:

ClickHouse is seeking a Product Security Engineer to join their Security Team, which focuses on application, cloud, and enterprise security, incident response, detection, and GRC.
The role involves collaborating with engineering and product teams to enhance existing features and develop new ones, emphasizing threat modeling, assurance, and secure implementation.
Responsibilities include identifying security gaps and vulnerabilities in ClickHouse Cloud and OSS, managing vulnerabilities reported through various channels, and improving security assurance activities such as pentests and vulnerability assessments.
The engineer will drive the implementation and usage of engineering security tools, nurture the relationship between engineering and security, handle information security events, and develop processes and automation to scale security efforts.

Requirements:

Candidates must have experience supporting engineering and product implementation efforts through threat assessments and assurance activities across distributed systems.
A strong knowledge of one or more cloud service providers (AWS, GCP, Azure), Kubernetes, and related technologies is required.
Experience with engineering security tools and processes, including static/dynamic code analysis and software composition analysis, is essential.
Significant development and automation experience is necessary, with a preference for candidates who can work with C++ code.
A security-as-code mindset focused on automation and scalability is expected.

ClickHouse offers a flexible work environment with remote-first options for all employees.
The company provides employer contributions towards healthcare and grants stock options to every new team member.
Employees enjoy flexible time off in the US and generous time off entitlements in other countries.
Remote employees receive a $500 allowance for home office setup.
The company supports employee-driven international mobility, allowing relocation within certain countries and timelines.