
Senior Product Security Engineer
ClickHouse is seeking a Senior Product Security Engineer to join its Security Team, focusing on application, cloud, and enterprise security. The role involves threat modeling, vulnerability management, security assurance, and driving security automation across engineering and product teams. This position can be fully remote anywhere in the Netherlands.
What you'll do
- Collaborate with engineering and product on improving existing and building new product features with focus on threat modeling, assurance and secure implementation
- Identify security gaps and vulnerabilities in ClickHouse Cloud and OSS, triage a wide range of vulnerabilities reported via bug bounty program, responsible disclosure, GitHub Issues
- Improve and develop security assurance activities - pentests, vulnerability assessments, bug bounty programs, fuzzing
What you need
Must-have
Threat ModelingVulnerability AssessmentPenetration TestingStatic Code AnalysisDynamic Code AnalysisSoftware Composition AnalysisSBOMOWASP SAMM
Nice-to-have
Open Source ContributionsSecurity CertificationsCloud Certifications
Soft skills
CollaborationProblem SolvingAutomation Mindset
Product SecurityCloud SecurityApplication SecurityIncident ResponseGRCSoftware DevelopmentInformation TechnologySeniorRemoteNetherlands