Cloud Security Engineer

ClickHouse is seeking an experienced, hands-on Cloud Security Engineer to strengthen its security capabilities. The role focuses on developing incident response processes, tooling, and automation; improving detection through threat modeling; maintaining security logging; and handling information security incidents across ClickHouse products and services.

Responsibilities:

• Develop processes, tooling and automation to scale incident management response and mitigate risks to the business
• Collaborate with other security functions, engineering, product, support, business operations to identify appropriate detection use cases and automation
• Apply a threat modeling centric approach to incident detection and response
• Maintain security logging platform
• Stay up to date with the latest threats, attack vectors to improve our detection mechanisms and attack surface management
• Handle information security events and incidents across the ClickHouse products and services

Requirements:

• Background in product security / red teaming / penetration testing / threat modeling, combined with incident detection and response experience
• Strong knowledge of and experience with one or more cloud service providers (e.g. AWS, GCP, Azure)
• Excellent written and verbal communication skills
• Experience securing large-scale customer-facing cloud infrastructures
• Significant development and automation experience
• preference for Golang and Python
• BS, MS, or PhD in Computer Science or related field
• Previous contributions to open source projects
• Security or cloud related certifications (AWS, GCP, Azure)