# Offensive Security Engineer

**Company**: ClickHouse
**Location**: EMEA
**Work arrangement**: remote
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Technology

**Apply**: https://jobs.ashbyhq.com/clickhouse/75561c67-9c76-4f45-b1a3-70848470bd1e?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_6cfb870d-abf

## Description

The Security Team at ClickHouse is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. We are looking for an experienced, hands-on security practitioner to drive the adoption of modern security processes and tooling.

Responsibilities:

- Identify security gaps and vulnerabilities in all ClickHouse offerings

- Triage a wide range of vulnerabilities reported via bug bounty program, responsible disclosure, GitHub Issues

- Improve and develop security assurance activities such as pentests, vulnerability assessments, bug bounty programs, fuzzing

- Plan and execute internal red team assessments and penetration tests against ClickHouse infrastructure, cloud environments

- Assess AI/LLM-specific attack surface across ClickHouse's own AI-powered features and internal AI tooling

- Build and operate agentic tooling for reconnaissance, exploit-chaining and attack-path discovery

- Partner with detection engineering to validate and improve detection coverage during red team exercises

- Handle information security events and incidents across ClickHouse products and services

- Develop processes, tooling and automation to scale security processes and mitigate risks to the business

Requirements:

- 7+ years of experience in pentesting, red teaming and product security

- Experience supporting engineering and product implementation efforts

- Hands-on experience conducting offensive security engagements

- Ability to design adversary scenarios grounded in real threat intelligence

- Strong written and verbal communication skills

- Experience building or adapting agentic and LLM-assisted tooling for offensive security use cases

- Familiarity with AI/LLM-specific vulnerability classes and testing methodology

- Strong knowledge of and experience with one or more cloud service providers, Kubernetes, Cilium

Perks:

- Flexible work environment

- Remote-friendly

- Healthcare

- Employer contributions towards healthcare

- Equity in the company

- Time off

- A USD$500 Home office setup

- Global Gatherings

## Skills

### Required
- pentesting
- red teaming
- product security
- cloud security
- Kubernetes
- Cilium
- AI/LLM security
- agentic tooling
- LLM-assisted fuzzing

### Nice to have
- BS, MS, or PhD in Computer Science
- Previous contributions to open source projects
- Security or cloud related certifications
- Previous experience in using AI security harnesses for pentesting purposes
- Experience building or operating internal red team tooling and infrastructure from scratch
- Offensive security certifications

---

Source: [Apply at jobs.ashbyhq.com](https://jobs.ashbyhq.com/clickhouse/75561c67-9c76-4f45-b1a3-70848470bd1e?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)