{"id":583559,"url":"https://alion.io/job/clickhouse-dev-incident-response-security-engineer","title":"Incident Response Security Engineer","company":{"id":3448,"name":"ClickHouse","domain":"clickhouse.com","url":"https://alion.io/company/clickhouse","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":82,"open_postings":38,"ghost_share":0,"stale_share":0.526,"repost_share":0,"time_to_fill_p50_days":70,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":127000,"max_usd":290000,"period":"year","method":"role_country_seniority_unknown","sample_n":3177},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"ClickHouse","optional":false},{"name":"GCP","optional":false},{"name":"Go","optional":false},{"name":"Incident Management","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-08-25T11:43:26Z","employer_posted_date":"2026-08-25","last_verified_at":"2026-10-16T16:02:39Z","board_verified":true,"closed_at":null,"days_open":52,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":52},"description":"The Security Team is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. Our team is looking for an experienced, hands-on security practitioner, who will drive the adoption of modern security processes and tooling, with focus on supporting our detection and incident response capabilities.\nWhat you will do:\nDevelop processes, tooling and automation to scale incident management response and mitigate risks to the business\n\nCollaborate with other security functions, engineering, product, support, business operations to identify appropriate detection use cases and automation\n\nApply a threat modeling centric approach to incident detection and response\n\nMaintain security logging platform\n\nStay up to date with the latest threats, attack vectors to improve our detection mechanisms and attack surface management\n\nHandle information security events and incidents across the ClickHouse products and services\n\nWhat you bring along:\nBackground in product security / red teaming / penetration testing / threat modeling, combined with incident detection and response experience\n\nStrong knowledge of and experience with one or more cloud service providers (e.g. AWS, GCP, Azure)\n\nExcellent written and verbal communication skills\n\nExperience securing large-scale customer-facing cloud infrastructures\n\nSignificant development and automation experience; preference for Golang and Python\n\nBonus Points:\nBS, MS, or PhD in Computer Science or related field\n\nPrevious contributions to open source projects\n\nSecurity or cloud related certifications (AWS, GCP, Azure)\n\nPerks\nFlexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries.\n\nHealthcare - Employer contributions towards your healthcare.\n\nEquity in the company - Every new team member who joins our company receives stock options.\n\nTime off - Flexible time off in the US, generous entitlement in other countries.\n\nA USD$500 Home office setup if you’re a remote employee.\n\nGlobal Gatherings - We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites.\n\nCulture - We All Shape It\nAs part of a rapidly scaling start-up, you will be instrumental in shaping our culture.\nAre you interested in finding out more about our culture? Learn more about our values here. Check out ourblog posts or follow us on LinkedIn to find out more about what’s happening at ClickHouse.\nEqual Opportunity & Privacy\nClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.\nPlease see here for our Privacy Statement.","description_format":"text","description_chars":3002,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible schedule","Flexible time off","Home office","Stock options"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Data Warehouses & Lakehouses","Databases & DBMS"],"lifecycle":[{"event":"open","at":"2026-09-10T00:51:39Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 8 · green card filings: 1","filings_12m":8,"filings_prev_12m":7,"green_card_filings_12m":1,"median_offered_wage_usd":204167,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":1}],"liveness":{"score":37,"band":"fade","label":"Fading","p_open":1,"p_active":0.609,"p_room":0.6,"age_days":51,"expected_fill_days":70,"reasons":["conf:3","stale_co","velocity","win:late","crowd:brand"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/clickhouse-dev-incident-response-security-engineer","json_url":"https://alion.io/job/clickhouse-dev-incident-response-security-engineer.json","meta":{"generated_at":"2026-10-16T19:04:42Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4531,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3448},"rest":"https://alion.io/mcp/rest/get_company?id=3448"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fclickhouse-dev-incident-response-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fclickhouse-dev-incident-response-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fclickhouse-dev-incident-response-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/clickhouse-dev-incident-response-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fclickhouse-dev-incident-response-security-engineer"}]}