Incident Response Security Engineer

About the role

We are looking for an Incident Response Security Engineer to join ClickHouse’s Security Team. The role focuses on building and scaling detection and incident response capabilities across our cloud‑native products, ensuring rapid mitigation of security threats.

Key responsibilities

• Develop processes, tooling and automation to scale incident management and reduce business risk.
• Collaborate with security functions, engineering, product, support and operations to define detection use cases and automation.
• Apply threat‑modeling techniques to incident detection and response.
• Maintain and enhance the security logging platform.
• Stay current on emerging threats and attack vectors to improve detection mechanisms.
• Handle information security events and incidents across ClickHouse products and services.

Required profile

• Background in product security, red teaming, penetration testing or threat modeling combined with incident detection and response experience.
• Strong knowledge of at least one major cloud provider (AWS, GCP or Azure).
• Experience securing large‑scale, customer‑facing cloud infrastructures.
• Significant development and automation experience, preferably with Golang and Python.
• Excellent written and verbal communication skills.

Required skills

• AWS
• GCP
• Azure
• Golang
• Python
• Red teaming
• Penetration testing
• Threat modeling

What we offer

• Flexible, remote‑friendly work environment across more than 25 countries.
• Employer‑paid healthcare contributions.
• Equity through stock options.
• Flexible time off and generous leave policies.
• $500 home‑office stipend for remote employees.
• Opportunities to attend global gatherings and company‑wide offsites.