Server C++ Engineer (Security & Distributed Systems)

Altinity, Inc. builds real-time data solutions around ClickHouse, an open-source analytic database. The Server C++ Engineer will design, implement, and support ClickHouse server features while focusing on identifying, analyzing, and resolving security vulnerabilities in ClickHouse and its dependencies. The role also involves debugging, performance optimization, code review, customer support, and collaboration with the open-source community.

Responsibilities:

• Write good task-specific C++ code and solidify it with tests
• Debug issues reported by users, fix them and add tests to make sure they won't happen again
• Profile existing code and make it faster (either by applying clever algorithms, adding vectorized intrinsics, or by implementing cool tricks), add performance tests
• Submit your own pull requests and review pull requests from others
• Help the Support Team investigate customer problems running ClickHouse
• Help new community members contribute to ClickHouse
• Attend meetups and make presentations on open-source development
• Write blog articles and share information about ClickHouse

Requirements:

• Proven experience in design, implementation, and testing high-performance DBMS features in a complex C++ codebase
• Excellent background in database internals including query languages, access methods, storage, and/or connectivity
• Demonstrated ability to read and write good C++
• Good understanding of networking and I/O on Linux
• Ability to assess the applicability and severity of newly disclosed vulnerabilities in large software systems and their dependency chains
• Experience reproducing security issues, performing root cause analysis, and developing robust, testable fixes
• Familiarity with common vulnerability classes including memory corruption, denial of service, privilege escalation, authentication bypass, injection vulnerabilities, and information disclosure
• Familiarity with CVSS scoring, threat modeling, and security risk assessment
• Understanding of software supply chain security and dependency risk management
• Ability to independently investigate ambiguous technical problems and make sound engineering decisions
• Strong written communication skills, including the ability to document vulnerabilities, mitigations, and security recommendations clearly
• Familiar with performance optimization techniques and tools
• History of getting pull requests vetted and merged in rapidly evolving open-source projects
• Sound knowledge of database testing, debugging, and low-level performance optimization
• Enthusiasm to learn more about database technology and data-related applications
• Good English language reading and writing skills
• Eager to work with a friendly, distributed team following open-source dev practices
• Previous experience with ClickHouse development and vulnerability management processes