Netherlands
1 week ago
Senior Product Security Engineer logo

Senior Product Security Engineer

ClickHouse

Senior Product Security Engineer

ClickHouse is seeking a Senior Product Security Engineer to join its Security Team, focusing on application, cloud, and enterprise security. The role involves threat modeling, vulnerability management, security assurance, and driving security automation across engineering and product teams. This position can be fully remote anywhere in the Netherlands.

HybridFull-timeSeniorThreat ModelingVulnerability Assessment

Salary

Not specified

Work Location

Netherlands, NL

Work Model

Hybrid; can be fully remote anywhere in the Netherlands

Employment Type

Full-time

Experience Level

Senior

Core Qualifications

Technical (Must-have)
Threat ModelingVulnerability AssessmentPenetration TestingStatic Code AnalysisDynamic Code AnalysisSoftware Composition AnalysisSBOMOWASP SAMMFuzzingAWSGCPAzureKubernetesCiliumC++
Soft Skills
CollaborationProblem SolvingAutomation Mindset

Preferred Qualifications

Technical (Nice-to-have)
Open Source ContributionsSecurity CertificationsCloud Certifications

Key Responsibilities

  • Collaborate with engineering and product on improving existing and building new product features with focus on threat modeling, assurance and secure implementation
  • Identify security gaps and vulnerabilities in ClickHouse Cloud and OSS, triage a wide range of vulnerabilities reported via bug bounty program, responsible disclosure, GitHub Issues
  • Improve and develop security assurance activities - pentests, vulnerability assessments, bug bounty programs, fuzzing
  • Drive implementation and usage of engineering security tools - static, dynamic code analysis, dependency checks, code licensing compliance
  • Nurture the engineering - security relationship, identify and implement process and technology improvements
  • Handle information security events and incidents across ClickHouse products and services
  • Develop processes, tooling and automation to scale security processes and mitigate risks to the business
Product SecurityCloud SecurityApplication SecurityIncident ResponseGRCSoftware DevelopmentInformation TechnologySeniorRemoteNetherlands