Product Security Engineer (Remote - Canada)

This position is posted by Jobgether on behalf of ClickHouse. We are currently looking for a Product Security Engineer in Canada.

Join a fast-paced, globally distributed team focused on strengthening the security of cutting-edge data platforms. As a Product Security Engineer, you’ll collaborate directly with engineering and product teams to embed robust security features across cloud and open-source environments. Your mission will involve identifying vulnerabilities, implementing secure architecture, and enhancing automation at scale. If you’re passionate about secure development practices, cloud infrastructure, and innovative problem-solving, this role will allow you to shape security strategy from the ground up — all while working remotely across North America.

Accountabilities:

• Partner with engineering and product teams to design and secure new features through threat modeling and secure implementation practices.
• Assess and triage vulnerabilities from various sources (bug bounty, responsible disclosure, GitHub issues) across APIs, web, and client/server systems.
• Lead security assurance initiatives such as penetration testing, vulnerability assessments, and fuzzing activities.
• Drive the adoption of security tooling including static/dynamic code analysis, software composition analysis, and license compliance tools (e.g., Snyk, Semgrep, GitHub CodeQL).
• Promote a strong engineering-security relationship and identify process improvements to reduce risk.
• Respond to security events and incidents, developing scalable tools and processes to mitigate future threats.
• Automate and operationalize security measures to integrate seamlessly into the development lifecycle.

• Proven experience supporting secure development efforts through threat modeling, security reviews, and hands-on implementation across distributed systems.
• Deep understanding of cloud service providers (AWS, GCP, Azure), Kubernetes, and related security technologies such as Cilium.
• Strong background in development and automation, with the ability to navigate and contribute to C++ codebases.
• Hands-on experience with security tools and processes (e.g., static/dynamic analysis, fuzzing, SBOM, OWASP SAMM).
• “Security as code” mindset, with a focus on automation, scalability, and efficiency.
• Bonus: Advanced degrees (BS, MS, PhD in Computer Science), contributions to open-source projects, or relevant security/cloud certifications.

• 💻 Fully remote work setup across Canada or the U.S., plus $500 for home office equipment.
• 🏥 Employer-contributed healthcare benefits.
• 📈 Equity in the company for all new hires.
• 🕒 Flexible time off policies and generous leave entitlements.
• 🌍 Opportunities for global in-person meetups and team gatherings.
• 🌐 Be part of shaping a diverse, open-minded culture as one of the company’s early employees.

Jobgether is a Talent Matching Platform that partners with companies worldwide to efficiently connect top talent with the right opportunities through AI-driven job matching.

When you apply, your profile goes through our AI-powered screening process designed to identify top talent efficiently and fairly.

🔍 Our AI evaluates your CV and LinkedIn profile thoroughly, analyzing your skills, experience and achievements.
📊 It compares your profile to the job’s core requirements and past success factors to determine your match score.
🎯 Based on this analysis, we automatically shortlist the 3 candidates with the highest match to the role.
🧠 When necessary, our human team may perform an additional manual review to ensure no strong profile is missed.

The process is transparent, skills-based, and free of bias — focusing solely on your fit for the role.
Once the shortlist is completed, we share it directly with the company that owns the job opening. The final decision and next steps (such as interviews or additional assessments) are then made by their internal hiring team.

Thank you for your interest!

#LI-CL1