Elevate Your Impact: Senior Product Security Engineer (Netherlands Remote)
Are you a passionate, hands-on security practitioner eager to shape the security posture of cutting-edge data platforms? Join ClickHouse, the creators of the world's fastest open-source analytical database, and play a pivotal role in safeguarding our innovative cloud and open-source offerings. This is your chance to drive modern security processes, implement advanced tooling, and collaborate directly with our engineering and product teams to build secure-by-design solutions.
About the Team
The Security Team at ClickHouse is at the forefront of protecting our application, cloud, and enterprise environments. We're a dynamic group responsible for comprehensive security capabilities, including incident response, threat detection, and GRC. We're seeking an experienced, proactive engineer who thrives on challenging security problems and is committed to fostering a culture of security across our organization. You will be instrumental in improving the security of our platforms and services, working directly with the teams building them.
Note: This position offers the flexibility of being fully remote anywhere in the Netherlands.
What You'll Do
Drive Secure Product Development: Partner with engineering and product teams to integrate security throughout the software development lifecycle, focusing on threat modeling, assurance, and secure implementation. Recent impactful work includes secure key management, passwordless authentication, machine-to-machine (m2m) authentication, sandboxing, and compute/network/storage isolation.
Hunt and Remediate Vulnerabilities: Proactively identify security gaps and vulnerabilities across ClickHouse Cloud and our Open-Source Software (OSS). Triage and address a wide spectrum of findings from our bug bounty program, responsible disclosure, and GitHub Issues, covering web, API, server-client assets, and critical low-level memory issues like heap or buffer overflows.
Enhance Security Assurance: Evolve and implement robust security assurance activities, including leading penetration tests, vulnerability assessments, bug bounty programs, and fuzzing initiatives.
Champion Security Tooling: Drive the implementation and effective usage of advanced engineering security tools such as static and dynamic code analysis, dependency checkers, and code licensing compliance. Leverage your working knowledge of tools like Snyk, Semgrep, and GitHub CodeQL.
Cultivate Security Partnerships: Nurture strong relationships between engineering and security, acting as a trusted advisor to identify and implement process and technology improvements that empower developers to build securely.
Incident Response Leadership: Take charge of information security events and incidents across ClickHouse products and services, ensuring swift detection, containment, and recovery.
Scale Security through Automation: Develop innovative processes, tooling, and automation solutions to scale security practices efficiently and mitigate risks to the business at a global level.
What You'll Bring Along
Product Security Expertise: Proven experience supporting engineering and product implementation efforts through threat assessments, assurance activities, advisory, and hands-on implementation work across distributed systems encompassing web, API, and client/server assets.
Cloud & Container Security Mastery: Strong knowledge of and practical experience with one or more major cloud service providers (e.g., AWS, GCP, Azure), along with deep expertise in Kubernetes and Cilium.
Hands-on Tooling Experience: Experience implementing and operating engineering security tools and processes, including static/dynamic code analysis, software composition analysis (SCA), SBOM generation, OWASP SAMM principles, and client/network fuzzing tools.
Development & Automation Chops: Significant development and automation experience, coupled with the ability to effectively work with and understand C++ codebases.
Security as Code Mindset: A strong philosophical commitment to "security as code," focused on solving complex problems with automation, scalability, and repeatability at the forefront.
Bonus Points
BS, MS, or PhD in Computer Science or a related field.
Previous contributions to open-source projects.
Security or cloud-related certifications (AWS, GCP, Azure).
Perks
Flexible Work Environment: ClickHouse is a globally distributed, remote-friendly company operating in over 25 countries, offering unparalleled flexibility.
Healthcare: Generous employer contributions towards your healthcare.
Equity in the Company: Every new team member receives stock options, aligning your success with ours.
Time Off: Enjoy flexible time off in the US, with generous entitlements in other countries.
Home Office Setup: A USD$500 allowance for remote employees to create an optimal workspace.
Global Gatherings: Opportunities to connect and collaborate in person with colleagues at company-wide offsites, fostering strong team bonds.
Culture - We All Shape It
As part of a rapidly scaling start-up, you will be instrumental in shaping our culture. We value innovation, collaboration, and a relentless pursuit of excellence. Are you interested in finding out more about our culture? Learn more about our values here. Check out our blog posts or follow us on LinkedIn to find out more about what’s happening at ClickHouse.
Equal Opportunity & Privacy
ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
Please see here for our Privacy Statement.