Product Security Engineer

The Product Security Engineer will collaborate with engineering and product teams to enhance existing and develop new product features, focusing on threat modeling, assurance, and secure implementation, including secure key management, passwordless authentication, sandboxing, and isolation. They will identify security gaps and vulnerabilities in ClickHouse Cloud and OSS, triage reported vulnerabilities from bug bounty programs and responsible disclosure, and improve security assurance activities like pentests, vulnerability assessments, bug bounty programs, and fuzzing. The role involves driving the implementation and usage of engineering security tools for static/dynamic code analysis, dependency checks, and code licensing compliance, nurturing the engineering-security relationship, and handling information security events and incidents. Additionally, they will develop processes, tooling, and automation to scale security processes and mitigate business risks.