Server C++ Engineer (Security & Distributed Systems)

Altinity, Inc. is the home of ClickHouse experts who build real-time data solutions. They are seeking a Server C++ Engineer to help maintain and improve the security posture of ClickHouse, focusing on identifying and resolving security vulnerabilities.

Responsibilities:

• Write good task-specific C++ code and solidify it with tests
• Debug issues reported by users, fix them and add tests to make sure they won’t happen again
• Profile existing code and make it faster (either by applying clever algorithms, adding vectorized intrinsics, or by implementing cool tricks), add performance tests
• Submit your own pull requests and review pull requests from others
• Help the Support Team investigate customer problems running ClickHouse
• Help new community members contribute to ClickHouse
• Attend meetups and make presentations on open-source development
• Write blog articles and share information about ClickHouse

Requirements:

• Proven experience in design, implementation, and testing high-performance DBMS features in a complex C++ codebase
• Excellent background in database internals including query languages, access methods, storage, and/or connectivity
• Demonstrated ability to read and write good C++
• Good understanding of networking and I/O on Linux
• Ability to assess the applicability and severity of newly disclosed vulnerabilities in large software systems and their dependency chains
• Experience reproducing security issues, performing root cause analysis, and developing robust, testable fixes
• Familiarity with common vulnerability classes including memory corruption, denial of service, privilege escalation, authentication bypass, injection vulnerabilities, and information disclosure
• Familiarity with CVSS scoring, threat modeling, and security risk assessment
• Understanding of software supply chain security and dependency risk management
• Ability to independently investigate ambiguous technical problems and make sound engineering decisions
• Strong written communication skills, including the ability to document vulnerabilities, mitigations, and security recommendations clearly
• Familiar with performance optimization techniques and tools
• History of getting pull requests vetted and merged in rapidly evolving open-source projects
• Sound knowledge of database testing, debugging, and low-level performance optimization
• Enthusiasm to learn more about database technology and data-related applications
• Good English language reading and writing skills
• Eager to work with a friendly, distributed team following open-source dev practices
• Previous experience with ClickHouse development and vulnerability management processes