Job Description

ClickHouse is seeking an experienced Product Security Engineer to drive the adoption of modern security processes and tooling, supporting engineering and product teams in improving the security posture of their platforms and services. The role involves threat modeling, vulnerability triage, security assurance activities, and implementing engineering security tools.

Responsibilities

• Collaborate with engineering and product on threat modeling and secure implementation
• Identify and triage security gaps and vulnerabilities
• Improve security assurance activities (pentests, vulnerability assessments, bug bounty programs)
• Drive implementation of engineering security tools (static/dynamic code analysis, dependency checks)
• Nurture the engineering-security relationship
• Handle information security events and incidents
• Develop processes and automation to scale security processes

Requirements

• Experience supporting engineering and product with threat assessments and assurance activities
• Strong knowledge of cloud service providers (AWS, GCP, Azure), Kubernetes
• Experience with engineering security tools (static/dynamic code analysis, SBOM)
• Significant development and automation experience
• Security as code mindset

Benefits

• No benefits