About this role.
ClickHouse is hiring an experienced Cloud Security Engineer to secure customer-facing infrastructure across AWS, GCP, and Azure. The role focuses on building scalable cloud security capabilities, including CSPM, infrastructure-as-code controls, secrets management, vulnerability remediation, and incident response. The engineer will partner closely with product and engineering teams to embed secure cloud practices into Kubernetes-based environments and DevOps workflows. This is a hands-on, automation-oriented role within a rapidly scaling, globally distributed cloud company.
Role DNA
A quick view of the complexity, pace, ownership and collaboration implied by the job description.
Job Complexity
4/5Pace & Pressure
4/5Autonomy Level
4/5Communication Load
4/5Salary analysis
Estimated compensation compared with the broader US market for similar roles.
Core skills
Skills and capabilities most closely associated with this opportunity.
Sample interview questions
I would define a common control framework covering identity, network segmentation, encryption, logging, asset inventory, vulnerability management, and configuration compliance. I would implement provider-native guardrails alongside a CSPM platform, manage policies as code, and establish exception workflows with clear owners and expiration dates.
I would start with cluster and workload hardening: least-privilege RBAC, workload identity, network policies, admission controls, image scanning and signing, secrets controls, and audit logging. I would also integrate runtime detection, continuously assess configuration drift, and work with platform teams to provide secure deployment templates that developers can adopt easily.
I would embed security checks into pull requests and deployment pipelines using policy as code, static analysis, and approved reusable modules. This shifts remediation earlier in the lifecycle, prevents common misconfigurations such as public storage or overly broad IAM permissions, and creates an auditable record of infrastructure changes.
I would first validate the finding and determine exposure, data sensitivity, ownership, and active exploitation indicators. I would coordinate immediate containment where appropriate, preserve evidence, remediate the root cause through infrastructure as code, assess similar resources for systemic risk, and document follow-up actions to prevent recurrence.
I focus on paved roads rather than manual gates: secure defaults, self-service modules, automated checks, and clear remediation guidance. I use risk-based exceptions for justified cases, measure friction and control effectiveness, and partner with engineering teams early so controls solve real operational problems rather than becoming late-stage blockers.
About ClickHouse
Recognized on the 2025 Forbes Cloud 100 list, ClickHouse is one of the most innovative and fast-growing private cloud companies. With more than 4,000 customers and ARR that has grown over 250 percent year over year, ClickHouse leads the market in real-time analytics, data warehousing, observability, and AI workloads.
The company’s sustained, accelerating momentum was recently validated by a $400M Series D financing round. Over the past three months, customers including Capital One, Lovable, Decagon, Polymarket, and Airwallex have adopted the platform or expanded existing deployments. These customers join an established base of AI innovators and global brands such as Meta, Cursor, Sony, and Tesla.
We’re on a mission to transform how companies use data. Come be a part of our journey!
The Security Team is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. Our team is looking for experienced, hands-on security practitioners, who will drive the adoption of modern security processes and tooling, with focus on automation and backed up by data-driven decisions.
What you will do:
- Secure cloud infrastructure supporting the ClickHouse products and services (AWS, GCP and Azure)
- Collaborate with product and engineering teams to facilitate safe and secure use of public cloud infrastructure and resources
- Develop and implement security systems (e.g. CSPM, infrastructure as code, secrets management) to secure and harden ClickHouse cloud infrastructure
- Identify and respond to identified security issues, vulnerabilities, and incidents
- Identify security gaps and vulnerabilities in ClickHouse assets
- Develop processes, tooling and automation to scale security processes and mitigate risks to the business
What you bring along:
- Strong knowledge of and experience with multiple cloud service providers (AWS, GCP, Azure)
- Experience securing large-scale customer-facing cloud infrastructures based on Kubernetes
- Expertise in common cloud-based DevOps practices (e.g. CI/CD, infrastructure as code, secrets management)
- Development and automation experience
Bonus Points:
- BS, MS, or PhD in Computer Science or related field
- Previous contributions to open source projects
- Security or cloud related certifications (AWS, GCP, Azure)
#LI-JL1
Compensation
For roles based in the United States, the typical starting salary range for this position is listed above. In certain locations, such as the San Francisco Bay Area and the New York City Metro Area, a premium market range may apply, as listed.
These salary ranges reflect what we reasonably and in good faith believe to be the minimum and maximum pay for this role at the time of posting. The actual compensation may be higher or lower than the amounts listed, and the ranges may be subject to future adjustments.
An individual’s placement within the range will depend on various factors, including (but not limited to) education, qualifications, certifications, experience, skills, location, performance, and the needs of the business or organization.
If you have any questions or comments about compensation as a candidate, please get in touch with us at paytransparency@clickhouse.com.
Perks
- Flexible work environment – ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 20 countries.
- Healthcare – Employer contributions towards your healthcare.
- Equity in the company – Every new team member who joins our company receives stock options.
- Time off – Flexible time off in the US, generous entitlement in other countries.
- A $500 Home office setup if you’re a remote employee.
- Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites.
Culture – We All Shape It
As part of a rapidly scaling start up, you will be instrumental in shaping our culture.
Are you interested in finding out more about our culture? Learn more about our values here. Check out our blog posts or follow us on LinkedIn to find out more about what’s happening at ClickHouse.
Equal Opportunity & Privacy
ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
Please see here for our Privacy Statement.
Annual salary information is not provided for this position. Explore salary ranges for similar roles in our Salary Directory ›
Upload your resume now
- To unlock remote work opportunities and be discovered by global employers.
This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.
