Product Security Engineer

Posted 1mo ago

The employer’s full description could not be read from their board. This is a summary of the posting — follow the apply link for the original.

Improve existing and build new product features with focus on threat modeling, assurance and secure implementation
Identify security gaps and vulnerabilities in ClickHouse Cloud and OSS
Triage a wide range of vulnerabilities reported via our bug bounty program, responsible disclosure, GitHub Issues
Improve and develop security assurance activities - pentests, vulnerability assessments, bug bounty programs, fuzzing
Drive implementation and usage of engineering security tools
Nurture the engineering - security relationship
Identify and implement process and technology improvements
Handle information security events and incidents across ClickHouse products and services
Develop processes, tooling and automation to scale security processes and mitigate risks

Experience supporting engineering and product implementation efforts by performing threat assessments, assurance activities, advisory as well as, in some cases, implementation work across distributed systems covering web, API, client/server assets
Strong knowledge of and experience with one or more cloud service providers (e.g. AWS, GCP, Azure)
Strong knowledge of and experience with Kubernetes
Strong knowledge of and experience with Cilium
Experience implementing and operating engineering security tools and processes (e.g. static / dynamic code analysis, software composition analysis, SBOM, OWASP SAMM, client and network fuzzing tools)
Significant development and automation experience
Ability to work with C++ code
Security as code mindset, with focus on solving problems with automation and scale in mind

Skills