Security Specialist - EMEA (location flexible)

Role Overview

Security Specialist (EMEA) — a specialist overlay within ClickHouse’s EMEA Solutions Architecture team. You step in on deals when security, data residency, or regulatory compliance are central, and you act as the credible technical voice for customers’ security stakeholders.

What You’ll Be Doing

• Serve as the security overlay on EMEA opportunities, supporting conversations on security, privacy, and compliance with customers and prospects.
• Partner with Account Solutions Architects and Account Executives to discuss deployment models, BYOC architectures, and security questions.
• Lead security conversations with CISOs, security architects, and GRC teams, translating ClickHouse architecture into recognized control frameworks.
• Design and validate secure ClickHouse Cloud and BYOC deployment patterns, including:
  • Network isolation and private connectivity
  • Encryption and customer-managed keys
  • Identity federation
  • Granular access control and secure multi-tenancy
• Run threat modelling and architecture reviews with customer security teams.
• Own the security workstream through POC and production readiness.
• Be the field authority on compliance posture across key frameworks and regulations, including:
  • SOC 2 Type II, ISO 27001, GDPR/EU data residency
  • HIPAA, PCI DSS
  • EU regulatory landscape such as DORA and NIS2
• Improve and accelerate security questionnaires, RFP security sections, DPIAs, and third-party risk reviews by building a reusable answer library.
• Build the EMEA security playbook for Solutions Architecture and enable SAs and AEs so routine security questions stay with the account team.

What You Bring

• Significant customer-facing technical experience in a data platform / analytics / streaming / database company; strong data architecture knowledge beyond security controls.
• Demonstrable depth in cloud and data security, including:
  • IAM, key management and cryptography
  • Network isolation
  • Secure multi-tenancy
  • Threat modelling and audit
• Working command of enterprise deal-gating frameworks and comfort with EU regulation:
  • SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS
• Credibility with security buyers; ability to distinguish between simply answering questions and successfully progressing through security reviews/meetings.
• Strong overlay instincts and clear writing; ability to work through others, prioritize across a region, and produce auditor-ready artefacts.

Bonus Points

• Security certifications such as CISSP, CCSP, or CISM.
• Hands-on security architecture across AWS, GCP, and Azure.
• Experience in regulated industries: financial services, healthcare, telco, or public sector.