ClickHouse - Senior Security Automation Engineer
Requirements
• Security & Automation Engineering Depth • Strong hands-on background in security automation and identity engineering (IAM/IGA). • Strong proficiency in at least one commonly used programming language to build scalable automation. Experience with Python, JavaScript (TypeScript highly preferred), or Go is required. • Experience building scalable and reliable automation ecosystems • Familiarity with compliance automation, continuous control monitoring, and extending GRC tools to meet the granular requirements of a variety of compliance frameworks. • Understanding of risks associated with change management, logical access, and data integrity. • Execution and Delivery • Demonstrated ability to translate complex security/GRC mandates into automated workflows and self-healing technical guardrails. • Strong instincts for eliminating operational friction and the engineering "interruption tax." • Experience delivering continuous data streams for security posture and risk validation. • BS, MS, or PhD in Computer Science or related field. • Previous experience at a cloud infrastructure, database, or developer tools company. • Experience with AI/Agentic risk engines and non-deterministic risk assessments.
Responsibilities
• Build the Security Telemetry and Risk Fabric • Control Design: Translate control frameworks into layered control implementations that prevent risks from being exploited and detect possible weaknesses within control design. Shift from reactive monitoring to self-healing security, preventing compliance drift before it becomes an audit finding. • Control Design: • Security Telemetry: Engineer a centralized security telemetry system that programmatically captures control evidence and health in real-time, transitioning from manual snapshots to continuous data streams for an 'always-on' view of our security posture. • Security Telemetry: • Custom Assurance Logic: Engineer specialized automation that acts as its own continuous audit function to minimize findings and provide real-time insights into our automated control performance. Extend visibility into our proprietary applications and complex internal workflows, ensuring our most critical controls are continuously validated. • Custom Assurance Logic: • Agentic Risk Engine: Partner with our risk management function to build a secure mechanism to generate agentic risk assessments workflows using the data and results from what is collected. • Agentic Risk Engine: • Architect Universal Identity and Access Automation • Universal Provisioning Connectors: Architect solutions for systems that lack native IGA support (proprietary databases, custom apps, and niche SaaS) to ensure instant account creation and de-provisioning—eliminating tickets, wait-times, and providing maximum observability into the state of Clickhouse identities. • Universal Provisioning Connectors: • Customer-Approved Access Workflows: Architect the complex, high-trust workflows required for support teams to access customer-specific instances, ensuring actions are customer-approved, strictly time-bound, and automatically revoked via a "Trust-by-Design" model. • Customer-Approved Access Workflows: • Centralized Security Visibility: Transition "hidden" access managed by disparate business units into a single, observable permissions inventory, gaining 100% visibility into permissions at the authZ level across our full suite of applications. • Centralized Security Visibility: • Automated Secret Discovery & Inventory: Develop automation to continuously discover and inventory secrets, credentials, and API keys throughout the environment, providing aging and rotation intervals for long lived keys. • Automated Secret Discovery & Inventory: • Eliminate "Ghost Accounts": Mitigate audit risks by ensuring automated de-provisioning for local identities, API keys, and persistent permissions across all target systems. • Eliminate "Ghost Accounts": • Partner Across Security, Engineering and Product • Work in tandem with GRC, Finance, and Security to build custom, bulletproof automation for compliance with different audit frameworks. • Eliminate the "Productivity Anchor" by removing manual provisioning workflows that slow down projects and flood teams with low-value administrative tickets.
Benefits
• For roles based in the United States, the typical starting salary range for this position is listed above. In certain locations, such as the San Francisco Bay Area and the New York City Metro Area, a premium market range may apply, as listed. • United States • These salary ranges reflect what we reasonably and in good faith believe to be the minimum and maximum pay for this role at the time of posting. The actual compensation may be higher or lower than the amounts listed, and the ranges may be subject to future adjustments. • An individual’s placement within the range will depend on various factors, including (but not limited to) education, qualifications, certifications, experience, skills, location, performance, and the needs of the business or organization. • If you have any questions or comments about compensation as a candidate, please get in touch with us at [email protected]. • Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 20 countries. • Flexible work environment • Healthcare - Employer contributions towards your healthcare. • Healthcare • Equity in the company - Every new team member who joins our company receives stock options. • Equity in the company • Time off - Flexible time off in the US, generous entitlement in other countries. • Time off • A $500 Home office setup if you’re a remote employee. • A $500 Home office setup • Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites. • Global Gatherings • Culture - We All Shape It • As part of a rapidly scaling start up, you will be instrumental in shaping our culture. • Are you interested in finding out more about our culture? Learn more about our values here. Check out our blog posts or follow us on LinkedIn to find out more about what’s happening at ClickHouse. • Equal Opportunity & Privacy
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT