About the role
ClickHouse is the hottest analytic database on the planet and Altinity is the home of ClickHouse experts who build real-time data solutions that run anywhere. ClickHouse now has more contributors than ElasticSearch, previously the biggest Open Source analytic project on GitHub. Altinity is a distributed company that values employees, open-source, and doing the right things for customers. Altinity is looking for a great ClickHouse QA Engineer / SDET with a security focus to help us deliver high-quality analytic data services across all environments and address emerging security threats. Along with other testing professionals, you will be testing features in the ClickHouse server, client interfaces, and related services around ClickHouse. We verify SQL, REST, native client APIs, authentication, authorization, RBAC, OAuth integrations, FIPS compatibility, and Linux, filesystem, networking, and process-level interfaces in the stack. You will be writing automated tests, running AI-assisted security scans, helping with scheduled CVE scans, and turning validated findings into reliable regression tests. Much of our software is open source and our tests make heavy use of open source software and development techniques. Your test code may be publicly visible, so it has to be great. You will be using AI daily but able to show your core technical skills without it. Here is how to tell if you fit: – You are able to pass a technical interview without using AI and are open to in-person interviews – You have security-focused testing experience or are willing to learn fast and make it your new passion – You have an unmatched motivation and are fascinated by software quality – You are an outstanding coder – You know or want to learn how to develop and run tests at every level of the stack – You can communicate and work well with a remote team Candidates need to meet the following
qualifications: – 3+ years of hands-on testing experience in DBMS, cloud services, storage, or operating systems – Strong working knowledge of Docker, Linux, and network security fundamentals – Experience with or strong interest in security testing, including CVE triage, dependency scanning, Docker image scanning with tools such as Grype or Trivy, authentication, authorization, RBAC, OAuth, TLS, FIPS, secrets handling, and security-hardened systems – Excellent knowledge of Python, C++ and bash scripting – Excellent coding skills and ability to write clean, efficient test code – Expert at designing enterprise-level functional tests for cloud services, client libraries, or service APIs – Experienced in using modern CI/CD systems like GitHub Actions – Tenacious at figuring out ways to break software and systematic in documenting bugs – Excellent discipline to follow test processes – Capable of working independently with minimal supervision Our
