Product Security Engineer

The Product Security Engineer will collaborate with engineering and product teams to improve existing and build new product features, focusing on threat modeling, assurance, and secure implementation, including secure key management, passwordless authentication, sandboxing, and isolation. They will identify security gaps and vulnerabilities in ClickHouse Cloud and OSS, triage reported vulnerabilities, and improve security assurance activities like pentests, vulnerability assessments, bug bounty programs, and fuzzing. The role involves driving the implementation and usage of engineering security tools such as static/dynamic code analysis, dependency checks, and code licensing compliance. Additionally, the engineer will nurture the engineering-security relationship, handle information security events and incidents, and develop processes, tooling, and automation to scale security processes and mitigate risks.