Tech Stack

Description

You will collaborate with engineering teams to improve product security through threat modeling, secure implementation, and vulnerability management. Your work will involve hands-on security assurance, tooling automation, and incident response to protect ClickHouse Cloud and open-source products.

Requirements

• Experience supporting engineering with threat assessments and advisory
• Strong knowledge of cloud providers (AWS, GCP, Azure), Kubernetes, Cilium
• Experience with security tools and processes (static/dynamic analysis, SCA, fuzzing)
• Significant development and automation experience, ability to work with C++ code
• Security as code mindset with automation focus

Responsibilities

• Collaborate with engineering on threat modeling and secure implementation
• Identify security gaps and triage vulnerabilities in ClickHouse Cloud and OSS
• Improve security assurance activities (pentests, bug bounties, fuzzing)
• Drive implementation of engineering security tools (static/dynamic analysis, dependency checks)
• Handle security incidents across products and services