Offensive Security Engineer

Posted 1mo ago

The employer’s full description could not be read from their board. This is a summary of the posting — follow the apply link for the original.

Identify security gaps and vulnerabilities in all ClickHouse offerings
Triage vulnerabilities reported via bug bounty, disclosure, and GitHub Issues
Improve and develop security assurance activities including pentests and fuzzing
Plan and execute internal red team assessments and penetration tests
Assess AI/LLM-specific attack surface across AI-powered features
Build and operate agentic tooling for reconnaissance and exploit-chaining
Apply LLM-assisted fuzzing to accelerate vulnerability discovery
Partner with detection engineering to validate and improve detection coverage
Handle information security events and incidents
Develop processes, tooling and automation to scale security operations

7+ years of experience in pentesting, red teaming and product security
Experience performing threat assessments and assurance activities for distributed systems
Hands-on experience conducting offensive security engagements across cloud and network
Ability to design adversary scenarios grounded in real threat intelligence
Experience building or adapting agentic and LLM-assisted tooling
Familiarity with AI/LLM-specific vulnerability classes and testing methodology
Strong knowledge of cloud service providers including AWS, GCP, or Azure
Experience with Kubernetes and Cilium
Experience implementing engineering security tools like static/dynamic analysis and SBOM
Security as code mindset with focus on automation

Skills