Incident Response Security Engineer

About the Role

Responsibilities

• Develop processes, tooling, and automation to scale incident management response and mitigate risks to the business
• Collaborate with other security functions, engineering, product, support, and business operations to identify detection use cases and automation
• Apply a threat modeling centric approach to incident detection and response
• Maintain the security logging platform
• Stay up to date with the latest threats and attack vectors to improve detection mechanisms and attack surface management
• Handle information security events and incidents across Clickhouse products and services

Requirements

• Background in product security, red teaming, penetration testing, threat modeling, combined with incident detection and response experience
• Strong knowledge of and experience with one or more cloud service providers (e.g., AWS, GCP, Azure)
• Excellent written and verbal communication skills
• Experience securing large-scale customer-facing cloud infrastructures
• Significant development and automation experience; preference for Golang

• Familiarize yourself with the latest cloud security threats and trends to demonstrate your expertise in threat modeling and incident response
• Highlight any experience with automation tools and scripting languages, such as Golang, to show your ability to scale security processes
• Prepare examples of how you've handled information security incidents in the past, focusing on your problem-solving skills and strategic approach
• Showcase your understanding of cloud service providers like AWS, GCP, or Azure, and how you've applied this knowledge in previous roles
• Consider creating a portfolio that includes case studies or projects demonstrating your security engineering skills, especially in areas like penetration testing or red teaming