About the company
The Security Team at ClickHouse is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. We are looking for an experienced, hands-on security practitioner to drive the adoption of modern security processes and tooling.
Responsibilities
- Develop processes, tooling and automation to scale incident management response and mitigate risks to the business
- Collaborate with other security functions, engineering, product, support, business operations to identify appropriate detection use cases and automation
- Apply a threat modeling centric approach to incident detection and response
- Maintain security logging platform
- Stay up to date with the latest threats, attack vectors to improve detection mechanisms and attack surface management
- Handle information security events and incidents across ClickHouse products and services
Requirements
- Background in product security / red teaming / penetration testing / threat modeling, combined with incident detection and response experience
- Strong knowledge of and experience with one or more cloud service providers (e.g., AWS, GCP, Azure)
- Excellent written and verbal communication skills
- Experience securing large-scale customer-facing cloud infrastructures
- Significant development and automation experience; preference for Golang and Python
Conditions
- Bonus points for BS, MS, or PhD in Computer Science or related field, contributions to open source projects, and security or cloud certifications