About this role.
ClickHouse is seeking a senior Security Specialist to serve as a specialist security overlay for EMEA enterprise opportunities, particularly in regulated industries. The role partners with Solutions Architects and Account Executives to address customer requirements involving cloud security, data residency, privacy, encryption, identity, and compliance. The specialist will design and validate secure ClickHouse Cloud and BYOC architectures, lead threat-modeling and production-readiness discussions, and support security reviews, RFPs, and DPIAs. Success requires strong data-platform architecture knowledge, customer-facing credibility with CISOs and GRC teams, and fluency in frameworks including SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS, DORA, and NIS2. This is a remote-friendly, high-autonomy position within a rapidly scaling global software company.
Role DNA
A quick view of the complexity, pace, ownership and collaboration implied by the job description.
Job Complexity
5/5Pace & Pressure
5/5Autonomy Level
4/5Communication Load
5/5Salary analysis
Estimated compensation compared with the broader US market for similar roles.
Core skills
Skills and capabilities most closely associated with this opportunity.
Cover letter sample
Dear Hiring Team,
I am excited to apply for the Security Specialist - EMEA role at ClickHouse. My background in cloud and data-platform security, including IAM, encryption, private connectivity, threat modeling, and compliance assurance, aligns well with supporting enterprise customers in regulated environments.
I am comfortable leading technical discussions with CISOs, security architects, and GRC teams while translating complex platform architectures into clear, audit-ready control narratives. I would bring a collaborative overlay approach to enable account teams, strengthen security responses, and help customers deploy secure ClickHouse Cloud and BYOC solutions.
I would welcome the opportunity to contribute to ClickHouse's EMEA growth and trusted security posture.
Sample interview questions
I would begin by understanding the customer's data classification, regulatory obligations, threat model, and required deployment model. I would then map ClickHouse controls and architecture—including private connectivity, IAM federation, encryption, customer-managed keys, and access controls—to those requirements, document residual risks, and validate the design through a production-readiness review.
I would translate the technical architecture into the control language used by the customer, such as access management, encryption, logging, change management, vendor risk, and incident response. I would provide concise evidence, identify shared-responsibility boundaries, and make clear where the platform's SOC 2, ISO 27001, GDPR, or other posture supports the requested framework.
A useful threat model identifies assets, trust boundaries, actors, entry points, likely abuse cases, and mitigations. For a data platform, I would focus on identity compromise, insecure network exposure, cross-tenant risks, data exfiltration, key-management failures, privileged access, and insufficient auditability, then prioritize mitigations based on likelihood and business impact.
I would establish reusable, approved responses supported by authoritative evidence and clear ownership, while tailoring answers only where the customer's architecture or regulatory scope requires it. I would track recurring questions and gaps, improve the answer library, and escalate novel commitments or legal interpretations to the appropriate security, legal, and compliance stakeholders.
I would lead with the business and regulatory outcome rather than reciting standards. For example, I would explain how regional deployment choices, access restrictions, encryption, retention controls, and documented processing arrangements support GDPR data-residency expectations, while clearly distinguishing contractual, operational, and technical responsibilities.
About ClickHouse
Recognized on the 2025 Forbes Cloud 100 list, ClickHouse is one of the most innovative and fast-growing private cloud companies. With more than 4,000 customers and ARR that has grown over 250 percent year over year, ClickHouse leads the market in real-time analytics, data warehousing, observability, and AI workloads.
The company’s sustained, accelerating momentum was recently validated by a $400M Series D financing round. Over the past three months, customers including Capital One, Lovable, Decagon, Polymarket, and Airwallex have adopted the platform or expanded existing deployments. These customers join an established base of AI innovators and global brands such as Meta, Cursor, Sony, and Tesla.
We’re on a mission to transform how companies use data. Come be a part of our journey!
As ClickHouse moves further into financial services, healthcare, telco, and the public sector across EMEA, more of our deals now turn on a specific set of questions: where the data lives, who can reach it, how it’s encrypted, and what the auditor needs to see. We’re looking for a Security Specialist to own those conversations, a specialist overlay within our EMEA Solutions Architecture team, brought in when security, data residency, or regulatory compliance conversations come up on a deal.
Our ideal candidate comes from inside the data industry – and pairs deep security expertise with real data architecture depth. You’ll be the credible technical voice in front of CISOs and security architects, and the internal authority our field relies on for answers.
What You’ll Be Doing
- Act as the security overlay on EMEA opportunities supporting conversations related to security, privacy, or compliance, engaging customers and prospects alongside the account Solutions Architect and Account Executive, discussing our various deployment models, BYOC architectures and all related security questions.
- Lead security conversations with CISOs, security architects, and GRC teams, translating ClickHouse architecture into the controls frameworks they recognize.
- Design and validate secure ClickHouse Cloud and BYOC deployment patterns network isolation, private connectivity, encryption, customer-managed keys, identity federation, and granular access control.
- Run threat modelling and architecture reviews with customer security teams, and own the security workstream through POC and production readiness.
- Be the field’s authority on our compliance posture — SOC 2 Type II, ISO 27001, GDPR and EU data residency, HIPAA, PCI DSS, and the European regulatory picture including DORA and NIS2.
- Raise the quality and speed of security questionnaires, RFP security sections, DPIAs, and third-party risk reviews, building the reusable answer library as you go.
- Build the security playbook for EMEA Solutions Architecture and enable SAs and AEs so routine security questions stay with the account team.
What You Bring
- Significant customer-facing technical experience at a data platform, analytics, streaming, or database company — you understand data architecture, not just security controls.
- Demonstrable depth in cloud and data security: IAM, key management and cryptography, network isolation, secure multi-tenancy, threat modelling, and audit.
- Working command of the frameworks that gate enterprise data deals — SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS — and comfort with EU regulation.
- Credibility with security buyers. You’ve held your own in front of a CISO and know the difference between answering the question and getting through the meeting.
- Overlay instincts and clear writing — comfortable working through others, prioritizing across a region, and producing artefacts that survive an auditor’s reading.
Bonus Points For
- Security certifications such as CISSP, CCSP, or CISM.
- Hands-on security architecture experience across AWS, GCP, and Azure.
- Experience in regulated industries — financial services, healthcare, telco, or the public sector.
Compensation
For roles based in the United States, the typical starting salary range for this position is listed above. In certain locations, such as the San Francisco Bay Area and the New York City Metro Area, a premium market range may apply, as listed.
These salary ranges reflect what we reasonably and in good faith believe to be the minimum and maximum pay for this role at the time of posting. The actual compensation may be higher or lower than the amounts listed, and the ranges may be subject to future adjustments.
An individual’s placement within the range will depend on various factors, including (but not limited to) education, qualifications, certifications, experience, skills, location, performance, and the needs of the business or organization.
If you have any questions or comments about compensation as a candidate, please get in touch with us at paytransparency@clickhouse.com.
Perks
- Flexible work environment – ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 20 countries.
- Healthcare – Employer contributions towards your healthcare.
- Equity in the company – Every new team member who joins our company receives stock options.
- Time off – Flexible time off in the US, generous entitlement in other countries.
- A $500 Home office setup if you’re a remote employee.
- Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites.
Culture – We All Shape It
As part of a rapidly scaling start up, you will be instrumental in shaping our culture.
Are you interested in finding out more about our culture? Learn more about our values here. Check out our blog posts or follow us on LinkedIn to find out more about what’s happening at ClickHouse.
Equal Opportunity & Privacy
ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
Please see here for our Privacy Statement.
Annual salary information is not provided for this position. Explore salary ranges for similar roles in our Salary Directory ›
Upload your resume now
- To unlock remote work opportunities and be discovered by global employers.
This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.
