Tech Stack

Description

You will collaborate with engineering and product teams to improve the security posture of ClickHouse Cloud and OSS, focusing on threat modeling, secure implementation, vulnerability triage, and security tooling. You'll drive security assurance activities and automate security processes to scale.

Requirements

• Experience in threat assessments, assurance, and implementation across distributed systems
• Strong knowledge of AWS, GCP, or Azure, Kubernetes, Cilium
• Experience with security tools (static/dynamic analysis, SCA, SBOM, fuzzing)
• Significant development and automation experience; ability to work with C++ code
• Security as code mindset with automation and scale focus

Responsibilities

• Collaborate with engineering on threat modeling, secure implementation, and product features
• Identify security gaps, triage vulnerabilities from bug bounty, disclosures, and GitHub issues
• Improve security assurance activities: pentests, vulnerability assessments, fuzzing
• Drive engineering security tools adoption: Snyk, Semgrep, GitHub CodeQL
• Handle information security events and incidents across products and services