Server C++ Engineer (Security & Distributed Systems)

About the role

As a Server Engineer, you'll be responsible for designing, implementing, and supporting features of ClickHouse ranging from encryption to storage to query processing. The primary focus of this role is identifying, analyzing, validating, and resolving security vulnerabilities that affect ClickHouse and its dependencies. You will work closely with the open-source community and Altinity engineering teams to ensure security issues are addressed quickly and correctly. We have lots of exciting projects underway as we help the community adapt ClickHouse to the cloud and Kubernetes.

Responsibilities

• Write good task-specific C++ code and solidify it with tests
• Debug issues reported by users, fix them and add tests to make sure they won't happen again
• Profile existing code and make it faster (either by applying clever algorithms, adding vectorized intrinsics, or by implementing cool tricks), add performance tests
• Submit your own pull requests and review pull requests from others
• Help the Support Team investigate customer problems running ClickHouse
• Help new community members contribute to ClickHouse
• Attend meetups and make presentations on open-source development
• Write blog articles and share information about ClickHouse

Requirements

• Proven experience in design, implementation, and testing high-performance DBMS features in a complex C++ codebase
• Excellent background in database internals including query languages, access methods, storage, and/or connectivity
• Demonstrated ability to read and write good C++
• Good understanding of networking and I/O on Linux
• Ability to assess the applicability and severity of newly disclosed vulnerabilities in large software systems and their dependency chains
• Experience reproducing security issues, performing root cause analysis, and developing robust, testable fixes
• Familiarity with common vulnerability classes including memory corruption, denial of service, privilege escalation, authentication bypass, injection vulnerabilities, and information disclosure
• Familiarity with CVSS scoring, threat modeling, and security risk assessment
• Understanding of software supply chain security and dependency risk management
• Ability to independently investigate ambiguous technical problems and make sound engineering decisions
• Strong written communication skills, including the ability to document vulnerabilities, mitigations, and security recommendations clearly
• Familiar with performance optimization techniques and tools
• History of getting pull requests vetted and merged in rapidly evolving open-source projects
• Sound knowledge of database testing, debugging, and low-level performance optimization
• Enthusiasm to learn more about database technology and data-related applications
• Good English language reading and writing skills
• Eager to work with a friendly, distributed team following open-source dev practices

Preferred qualifications

• Previous experience with ClickHouse development and vulnerability management processes

Benefits

• Work from anywhere, anytime with flexible scheduling and open vacation policies
• Cultural diversity with professionals from 24 different countries
• Career development opportunities including access to training on leading-edge technologies and flexible work schedules for external education
• Comprehensive PPO health care plans for US-based employees, plus 401K with company match
• Company travel for in-person gatherings two to three times per year, plus funded travel to conferences
• Full-time position with equity in the company
• Venture-funded and financially stable, 100% remote with work permit flexibility