Search Remote Jobs

Senior Product Security Engineer

đŸ”„ 5 minutes ago

🌐 Netherlands, Poland, +6 more countries – Remote

infoinfo

⏰ Full Time

🟠 Senior

đŸ‘źâ€â™‚ïž Cybersecurity / Security Engineer

Where this job comes from

Posted on ClickHouse's careers page, not through a job board

First seen by Remote Rocketship 5 minutes ago

Logo of ClickHouse

ClickHouse

51 - 200 employees

Founded 2016

☁ SaaS

🏱 Enterprise

đŸ€– Artificial Intelligence

SaaS ‱ Enterprise ‱ Artificial Intelligence

ClickHouse is a fast and resource-efficient real-time data warehouse and open-source database that is designed to deliver superior query performance for mission-critical and time-sensitive applications. It is available as a cloud service on major platforms like AWS, GCP, and Azure, with a "Bring Your Own Cloud" option and a wide range of integrations for seamless operation within diverse tech stacks. ClickHouse excels in real-time analytics, machine learning, business intelligence, and observability, making it an ideal choice for tasks such as financial services, fraud detection, and gaming analytics. It supports developer-friendly SQL operations, offers cost-effective storage solutions, and provides an open-source alternative to traditional databases. Companies like Sony, Lyft, Cisco, GitLab, and Twilio leverage ClickHouse for its scalability, efficiency, and ease of use.

📋 Description

‱ Collaborate with engineering and product teams on existing and new product features, focusing on threat modeling, assurance, and secure implementation ‱ Identify security gaps and vulnerabilities in ClickHouse Cloud and OSS ‱ Triage vulnerabilities reported through bug bounty programs, responsible disclosure, and GitHub Issues across web, API, and server-client assets ‱ Address low-level memory issues such as heap or buffer overflows ‱ Improve and develop security assurance activities, including penetration tests, vulnerability assessments, bug bounty programs, and fuzzing ‱ Drive implementation and use of engineering security tools for static and dynamic code analysis, dependency checks, and code licensing compliance ‱ Nurture the engineering-security relationship and implement process and technology improvements ‱ Handle information security events and incidents across ClickHouse products and services ‱ Develop processes, tooling, and automation to scale security processes and mitigate business risks

🎯 Requirements

‱ Experience supporting engineering and product implementation efforts through threat assessments, assurance activities, advisory, and implementation work across distributed systems covering web, API, and client/server assets ‱ Strong knowledge and experience with one or more cloud service providers, such as AWS, GCP, or Azure ‱ Experience with Kubernetes and Cilium ‱ Experience implementing and operating engineering security tools and processes, including static/dynamic code analysis, software composition analysis, SBOM, OWASP SAMM, and client/network fuzzing tools ‱ Significant development and automation experience ‱ Ability to work with C++ code ‱ Security-as-code mindset focused on automation and scale ‱ BS, MS, or PhD in Computer Science or a related field is listed as a bonus ‱ Previous contributions to open source projects are listed as a bonus ‱ Security or cloud-related certifications are listed as a bonus ‱ Ability to address work authorization sponsorship requirements for the Netherlands

đŸ–ïž Benefits

‱ Flexible work environment and remote-friendly work arrangement ‱ Employer contributions towards healthcare ‱ Stock options for every new team member ‱ Flexible time off in the US ‱ Generous time-off entitlement in other countries ‱ USD$500 home office setup allowance for remote employees ‱ Opportunities to engage with colleagues at company-wide offsites

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

🕒 September 29

Mozilla

501 - 1000

đŸ‘„ B2C

🔒 Cybersecurity

Senior Security Engineer protecting Mozilla’s open-source internet products through global incident response. Managing incidents, threat hunting, SIEM/EDR/SOAR automation, and 24/7 security operations.

🕒 September 18

Eurofins

10,000+ employees

đŸœïž Food & Beverage

đŸ„ Healthcare

📩 Logistics

SOC Consultant leading complex cyber incident investigations for Eurofins Scientific, an international life-sciences testing company. Improving incident response, forensics, remediation, and SOC security capabilities.

🕒 September 18

Duna

51 - 200

📋 Compliance

☁ SaaS

💳 Fintech

Infrastructure and security engineer hardening Duna's identity platform across AWS, Kubernetes and security controls. Automating compliance, self-service operations and safe AI-agent infrastructure.

🕒 August 21

Wiz

201 - 500

🔒 Cybersecurity

Security Engineer securing Wiz’s cloud and AI security platform. Building cloud, Kubernetes, vulnerability management, and detection-response controls for Wiz products and infrastructure.

🕒 January 31

DeepHealth

11 - 50

đŸ„ Healthcare

đŸ’Œ Consulting

📩 Logistics

Information Security Specialist developing and maintaining information security compliance strategies in digital health. Collaborating with teams to protect organizational data and ensure regulatory adherence.

Built by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok