Product Security Engineer

ClickhouseClickhouse·Remote(Canada (remote))
Software Development
Adjust

WFA Digital Insight

As demand for cloud-based data analytics surges, companies like Clickhouse are racing to secure their platforms. With a 34% growth in cloud security roles in 2025, skilled product security engineers are in high demand. Clickhouse's commitment to innovation and customer security makes this role stand out, but candidates should be prepared to demonstrate expertise in threat modeling, assurance, and secure implementation.

Job Description

About the Role

The Security Team at Clickhouse is seeking an experienced Product Security Engineer to drive the adoption of modern security processes and tooling.

Responsibilities

  • Collaborate with engineering and product teams to improve existing and build new product features with a focus on threat modeling, assurance, and secure implementation.
  • Identify security gaps and vulnerabilities in ClickHouse Cloud and OSS, and triage reported vulnerabilities.
  • Improve and develop security assurance activities, such as pentests, vulnerability assessments, and bug bounty programs.
  • Drive the implementation and usage of engineering security tools, including static and dynamic code analysis, dependency checks, and code licensing compliance.

About the Company

Clickhouse is a leading innovator in real-time analytics, data warehousing, observability, and AI workloads, with a growing customer base that includes global brands like Meta, Sony, and Tesla.

How to Stand Out

  • Develop a strong portfolio showcasing your experience with threat modeling, secure implementation, and security assurance activities.
  • Familiarize yourself with engineering security tools like Snyk, Semgrep, and GitHub CodeQL to stand out in the application process.
  • Prepare to discuss your approach to identifying and mitigating security gaps and vulnerabilities in cloud-based data analytics platforms.
  • Highlight any experience with bug bounty programs, pentests, and vulnerability assessments to demonstrate your proactive approach to security.
  • Be ready to discuss your understanding of secure key management, passwordless authentication, and compute/network/storage isolation.

This is a remote position listed on WFA Digital, the platform for professionals who work from anywhere. Browse more remote jobs across all categories.