RemoteLeaf Logo
Log in Sign up

Offensive Security Engineer

2 months, 1 week ago
Netherlands
Full-time
Senior
Penetration Tester
Cybersecurity
AWS Azure GCP Kubernetes Penetration Testing
Apply Now
ClickHouse

ClickHouse

ClickHouse provides a fast open source column-oriented database management system that enables users to generate real-time analytical data reports through SQL queries, catering to the needs of industries requiring efficient data processing and analysis.

IT Services
51-250
Founded 2021
$300M raised
View All Jobs 109

Description

  • Identify security gaps and vulnerabilities across ClickHouse offerings, including web, API, and server-client assets.
  • Triage vulnerabilities reported through bug bounty, responsible disclosure, and GitHub issues, including low-level memory issues.
  • Improve and develop security assurance activities such as penetration tests, vulnerability assessments, bug bounty programs, and fuzzing.
  • Plan and execute internal red team assessments and penetration tests against infrastructure and cloud environments.
  • Design realistic adversary scenarios to test detection, response, and control effectiveness.
  • Assess AI/LLM-specific attack surfaces in customer-facing features and internal AI tooling.
  • Build and operate agentic tooling for reconnaissance, exploit chaining, and attack-path discovery.
  • Partner with detection engineering to validate and improve detection coverage during red team exercises.
  • Handle information security events and incidents across products and services.
  • Develop processes, tooling, and automation to scale security operations and reduce business risk.

Requirements

  • 7+ years of experience in pentesting, red teaming, and product security.
  • Experience supporting engineering and product teams through threat assessments, assurance activities, advisory work, and some implementation work.
  • Hands-on experience with offensive security engagements across cloud, network, and application environments.
  • Ability to design adversary scenarios based on real threat intelligence and tailored to a multi-tenant cloud data platform.
  • Strong written and verbal communication skills.
  • Experience building or adapting agentic and LLM-assisted tooling for offensive security use cases.
  • Familiarity with AI/LLM-specific vulnerability classes and testing methodology.
  • Strong knowledge of one or more cloud providers such as AWS, GCP, or Azure, plus Kubernetes and Cilium.
  • Experience implementing security tools and processes such as static/dynamic code analysis, SCA, SBOM, OWASP SAMM, and fuzzing tools.
  • Security-as-code mindset with a focus on automation and scale.
  • BS, MS, or PhD in Computer Science or a related field (bonus).
  • Open source contributions (bonus).
  • Security or cloud certifications such as AWS, GCP, or Azure (bonus).
  • Experience using AI security harnesses for pentesting (bonus).
  • Experience building internal red team tooling and infrastructure from scratch (bonus).
  • Offensive security certifications such as OSCP, OSCE, OSEP, or OSWE (bonus).

Benefits

  • Flexible, remote-friendly work environment across 20+ countries.
  • Employer contributions toward healthcare.
  • Equity in the company through stock options.
  • Flexible time off in the US and generous entitlement in other countries.
  • $500 home office setup budget for remote employees.
  • Opportunities to attend company-wide offsites and global gatherings.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Zyte

Senior Reverse Engineer - Remote

Zyte 251-1K Professional Services

Zyte is hiring a Reverse Engineer to develop scalable tooling, automation, and AI-assisted pipelines that help engineers analyze evolving antibot and browser-fingerprinting systems and ship solutions faster.

Poland Full-time Senior Penetration Tester
Burp Suite C C++ JavaScript LLM Machine Learning Node.js Python Rust Wireshark
6 hours, 15 minutes ago
DoorDash

Manager, Third-Party Risk Management (TPRM)

DoorDash 10K-50K Air Freight & Logistics

DoorDash is hiring a US-based Third-Party Risk Management Manager to lead its global vendor security risk program, manage TPRM teams, and build AI-enabled workflows across DoorDash, Wolt, and Deliveroo.

United States Full-time Senior Penetration Tester
$164k-$242k
CI/CD Encryption OAuth OpenID Connect Penetration Testing Python SAML Secrets Management SQL
1 day, 5 hours ago
Aspenview Technology Partners

Incident Response Lead

Aspenview Technology Partners Internet Software & Services

AspenView Technology Partners is hiring a US-based Incident Response Lead to direct major incident response and digital forensics for a large consumer lender supported by nearshore security operations teams.

United States Full-time Lead Penetration Tester
AWS Azure Elasticsearch GCP Linux SIEM Splunk
4 days, 5 hours ago
Invicti

Staff Security Researcher (Europe Remote)

Invicti 251-1K Internet Software & Services

Invicti Security is hiring a hands-on Offensive Security Researcher in Europe to research emerging web, cloud, and AI threats and turn findings into accurate, production-ready detection capabilities.

Europe Full-time Lead Penetration Tester
Burp Suite GraphQL HTTP JavaScript Kubernetes Nmap Python REST API
4 days, 6 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers