Tech Stack
Tag name is followed by "@" symbol and proficiency level value.
About proficiency levels:
- 1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;
- 3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;
- 7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;
- 10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.
AWS @ 7
Azure @ 7
ClickHouse @ 4
Communication @ 6
Compliance
GCP @ 7
Go
Python @ 4
Security @ 4
- 1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;
- 3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;
- 7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;
- 10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.
Details
ClickHouse is seeking an experienced, hands-on security practitioner to drive the adoption of modern security processes and tooling, with a focus on detection and incident response. The Security Team provides capabilities across application, cloud, enterprise security, incident response, detection, and governance, risk, and compliance.
Responsibilities
- Develop processes, tooling, and automation to scale incident management response and mitigate business risks.
- Collaborate with security functions, engineering, product, support, and business operations to identify appropriate detection use cases and automation.
- Apply a threat-modeling-centric approach to incident detection and response.
- Maintain the security logging platform.
- Stay up to date with the latest threats and attack vectors to improve detection mechanisms and attack surface management.
- Handle information security events and incidents across ClickHouse products and services.
Requirements
- Background in product security, red teaming, penetration testing, or threat modeling, combined with experience in incident detection and response.
- Strong knowledge of and experience with one or more cloud service providers, such as AWS, GCP, or Azure.
- Excellent written and verbal communication skills.
- Experience securing large-scale, customer-facing cloud infrastructures.
- Significant development and automation experience, with a preference for Golang and Python.
Bonus Points
- Bachelor's, master's, or doctoral degree in Computer Science or a related field.
- Previous contributions to open-source projects.
- Security- or cloud-related certifications, including AWS, GCP, or Azure certifications.
Compensation
The typical starting salary in the United States is $169,150–$191,250 USD per year. A premium market range applies in certain locations, such as the San Francisco Bay Area and New York City metropolitan area, with a typical starting salary of $169,150–$225,000 USD per year. Actual compensation depends on factors including education, qualifications, certifications, experience, skills, location, performance, and business needs.
Benefits
- Flexible, remote-friendly work environment.
- Employer contributions toward healthcare.
- Company equity through stock options.
- Flexible time off in the United States and generous entitlement in other countries.
- $500 home office setup for remote employees.
- Opportunities to participate in company-wide global gatherings.