Remote Incident Response Engineer - Cloud Security & Equity

ClickHouse; United States; On-site; CAD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible work environment

Healthcare - employer contributions

Equity in the company

Flexible time off

Home office setup $500

Global gatherings

Job summary

ClickHouse is seeking an experienced security practitioner to drive incident response and detection across its global platform. You will develop scalable security processes, automate responses, and partner with engineering, product and operations to strengthen our defenses.

You will apply threat modeling, maintain logging infrastructures, and stay ahead of evolving threats to protect customers. Remote-friendly environment with international teams and ongoing learning opportunities.

Qualifications

• Background in product security, red teaming, threat modeling, and incident detection/response.
• Experience with cloud providers (AWS, GCP, Azure) and securing large-scale cloud infra.
• Excellent written and verbal communication skills in English; strong automation skills.

Responsibilities

• Develop processes, tooling and automation to scale incident management and mitigate risks.
• Collaborate with security, engineering, product, support and operations to identify detection use cases and automation.
• Apply threat modeling to incident detection and response.
• Maintain security logging platforms and monitoring tooling.
• Stay updated on new threats and attack vectors to improve detection and surface management.
• Handle information security events and incidents across ClickHouse products and services.

Skills

Product security

Red teaming

Threat modeling

Incident detection

Incident response

Cloud security

Golang

Python

Automation

Communication

Education

BS/MS/PhD in CS or related

Tools

AWS

GCP

Azure

Job description

ClickHouse is seeking an experienced security practitioner to drive incident response and detection across its global platform. You will develop scalable security processes, automate responses, and partner with engineering, product and operations to strengthen our defenses.

You will apply threat modeling, maintain logging infrastructures, and stay ahead of evolving threats to protect customers. Remote-friendly environment with international teams and ongoing learning opportunities.