Senior Detection & Incident Response Engineer
Are you a seasoned security professional passionate about protecting critical infrastructure and driving innovation in incident response? Join our dynamic Security Team at ClickHouse and play a pivotal role in strengthening our defenses across application, cloud, and enterprise environments. We're seeking a hands-on expert to elevate our detection and incident response capabilities, embracing modern processes and cutting-edge tooling.
The Security Team is at the forefront of providing essential security capabilities, covering application, cloud, enterprise security, incident response, detection, and GRC. This role focuses on enhancing our ability to rapidly identify, respond to, and mitigate security threats, making a tangible impact on the security posture of our products and services.
Your Mission & Impact: Architect and Automate: Design, build, and deploy advanced processes, tooling, and automation to scale incident management, significantly reducing business risk. What You'll Bring: Deep Expertise: A proven background spanning product security, red teaming, penetration testing, or threat modeling, coupled with extensive hands-on incident detection and response experience. Desired Extras (A Plus If You Have These): A Bachelor's, Master's, or PhD in Computer Science or a related technical field. Perks of Working at ClickHouse: Flexible Work Environment: ClickHouse is a globally distributed, remote-friendly company, operating in over 25 countries. Our Culture - We All Shape It: Equal Opportunity & Privacy:
Strategic Collaboration: Partner with cross-functional teams (engineering, product, support, business operations, other security functions) to identify critical detection use cases and implement robust automation solutions.
Threat-Driven Defense: Spearhead a threat modeling-centric approach to continuously enhance our incident detection and response strategies.
Platform Guardian: Maintain and ensure the health and efficacy of our core security logging platform.
Proactive Intelligence: Monitor the evolving threat landscape, attack vectors, and industry trends to continuously improve our detection mechanisms and refine attack surface management.
Front-Line Defender: Lead the handling of complex information security events and incidents across all ClickHouse products and services.
Cloud Mastery: Strong working knowledge and practical experience with one or more major cloud service providers (e.g., AWS, GCP, Azure).
Communication Prowess: Exceptional written and verbal communication skills, able to articulate complex security concepts to diverse audiences.
Scalable Security: Demonstrated experience securing large-scale, customer-facing cloud infrastructures.
Automation Champion: Significant development and automation experience, with a strong preference for proficiency in Golang and Python.
Prior contributions to open-source projects.
Relevant security or cloud certifications (e.g., AWS, GCP, Azure).
Healthcare: Employer contributions towards your healthcare.
Equity in the Company: Every new team member receives stock options, aligning your success with ours.
Time Off: Flexible time off in the US, with generous entitlement in other countries.
Home Office Setup: A USD$500 home office setup stipend for remote employees.
Global Gatherings: Opportunities to engage with colleagues at company-wide offsites, fostering connection and collaboration.
As part of a rapidly scaling startup, you will be instrumental in shaping our culture. We believe in transparency, ownership, and innovation. We encourage you to learn more about our values here. Dive into our latest developments on our blog or follow us on LinkedIn to stay updated on what’s happening at ClickHouse.
ClickHouse is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees and applicants. We prohibit discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.
For details regarding our applicant privacy practices, please refer to our Privacy Statement.