Altinity, Inc. logo

Automation (Python) ClickHouse QA Engineer / SDET, Security Focus

Altinity, Inc. โ€ข Toronto, Ontario, Canada

remotefull-time
Posted Aug 27, 2026Apply by Sep 26, 2026

**Role & seniority: ** ClickHouse QA Engineer / SDET with security focus (seniority implied mid-level; 3+ years required)

**Stack/tools: **

  • Languages: Python, C++, bash

  • Test/automation: enterprise functional test design; automated regression tests

  • Infra: Linux, Docker

  • Security tooling: AI-assisted security scans; CVE scans; dependency scanning; Docker image scanning with Grype/Trivy

  • CI/CD: GitHub Actions

  • Security areas: authn/authz, RBAC, OAuth, TLS, secrets handling, FIPS compatibility, Linux/filesystem/network/process interfaces

  • Top 3 responsibilities:

    1. Build and run automated tests for ClickHouse server, clients, and related services/APIs (SQL, REST, native client, auth flows).

    2. Perform security-focused testing: AI-assisted scans, CVE triage, dependency and Docker image scanning; validate findings and convert to regression tests.

    3. Verify platform-level security behavior (authentication/authorization, RBAC, OAuth/TLS, FIPS; Linux/network/process/filesystem interactions) and document/systematically report bugs.

  • Must-have skills:

    • 3+ years hands-on testing in DBMS/cloud/storage/OS

    • Strong Linux + networking security fundamentals; Docker

    • Security testing depth: CVE triage, dependency scanning, Grype/Trivy, authn/authz, RBAC, OAuth, TLS, FIPS, secrets handling

    • Strong coding ability in Python + C++ + bash; clean, efficien

Full Description

ClickHouse is the hottest analytic database on the planet and Altinity is the home of ClickHouse experts who build real-time data solutions that run anywhere. ClickHouse now has more contributors than ElasticSearch, previously the biggest Open Source analytic project on GitHub.

Altinity is a distributed company that values employees, open-source, and doing the right things for customers.

Altinity is looking for a great ClickHouse QA Engineer / SDET with a security focus to help us deliver high-quality analytic data services across all environments and address emerging security threats. Along with other testing professionals, you will be testing features in the ClickHouse server, client interfaces, and related services around ClickHouse. We verify SQL, REST, native client APIs, authentication, authorization, RBAC, OAuth integrations, FIPS compatibility, and Linux, filesystem, networking, and process-level interfaces in the stack. You will be writing automated tests, running AI-assisted security scans, helping with scheduled CVE scans, and turning validated findings into reliable regression tests. Much of our software is open source and our tests make heavy use of open source software and development techniques. Your test code may be publicly visible, so it has to be great. You will be using AI daily but able to show your core technical skills without it.

Here is how to tell if you fit

You are able to pass a technical interview without using AI and are open to in-person interviews You have security-focused testing experience or are willing to learn fast and make it your new passion You have an unmatched motivation and are fascinated by software quality You are an outstanding coder You know or want to learn how to develop and run tests at every level of the stack You can communicate and work well with a remote team

Candidates need to meet the following qualifications

3+ years of hands-on testing experience in DBMS, cloud services, storage, or operating systems Strong working knowledge of Docker, Linux, and network security fundamentals Experience with or strong interest in security testing, including CVE triage, dependency scanning, Docker image scanning with tools such as Grype or Trivy, authentication, authorization, RBAC, OAuth, TLS, FIPS, secrets handling, and security-hardened systems Excellent knowledge of Python, C++ and bash scripting Excellent coding skills and ability to write clean, efficient test code Expert at designing enterprise-level functional tests for cloud services, client libraries, or service APIs Experienced in using modern CI/CD systems like GitHub Actions Tenacious at figuring out ways to break software and systematic in documenting bugs Excellent discipline to follow test processes Capable of working independently with minimal supervision

Our Benefits

Work from Anywhere, Anytime: We are not your typical nine-to-five shop! Enjoy the flexibility of working from literally wherever and whenever. Create a schedule that works for you and your family or lifestyle. Recharge your batteries with our open vacation policies.

Cultural Diversity: We love that we get to work with passionate people from around the world. Currently, our team is made of professionals from 25 different countries!

Career Development: We provide opportunities to learn new technologies as well as try out new roles. We also offer access to training on leading-edge technologies, plus flexible work schedules for external education.

USA Employees Benefits: We offer comprehensive PPO health care plans for our US-based employees that are incredibly flexible to meet the needs of individuals or families. 401K with company match also available.

Company Travel: We come together in person two to three times per year in locations across the globe.

We also fund travel to conferences and encourage presentations as well as contributions to open-source communities.

This is a full-time position and includes equity in the company.

Altinity is venture-funded and financially stable.

We are 100% remote. You may work anywhere you have work permits.

Check out our many other benefits including flexible work hours, career development, and open vacation policies.

We are eager to meet you!

PythonC++Bash ScriptingDockerLinuxNetwork SecurityCVE TriageDependency ScanningRBACOAuthTLSFIPSGitHub ActionsCI/CDSQLREST APIsmulti-location

Cookies & analytics consent

We serve candidates globally, so we only activate Google Tag Manager and other analytics after you opt in. This keeps us aligned with GDPR/UK DPA, ePrivacy, LGPD, and similar rules. Essential features still run without analytics cookies.

Read how we use data in our Privacy Policy and Terms of Service.