[Hiring] Senior Security Engineer, Infrastructure Security @ClickUp

Role Description

At ClickUp, we're building the future of work: the first truly converged AI workspace unifying tasks, docs, chat, calendar, and enterprise search, all supercharged by context-driven AI. We are an AI-native company. Every team member is expected to leverage AI daily, and we evaluate AI fluency as part of our hiring process. Join us and help redefine what's possible. 🚀

Security at ClickUp is engineering-focused. We partner with teams across the company to protect our platform, our internal systems and our customers through secure design, defensive controls, detection and response. We build tooling and automation, including AI-powered workflows, to turn what we learn into lasting improvements.

Infrastructure Security at ClickUp secures the cloud, compute, network and access layers underneath ClickUp:

• A multi-account AWS organization
• A large Kubernetes fleet
• Infrastructure managed as code
• The identity systems engineers use to reach production

You will support this mission by:

• Thinking like a developer
• Breaking down a problem that we face
• Testing a method to approach it with automation
• Implementing solutions that yield compounding value
• Uncovering threat indicators

The role includes:

• Architecture, proposals and reviews: Act as an initial reviewer on infrastructure proposals and designs from engineering and non-engineering teams. Write security proposals and review the changes that follow. Translate security requirements into clear guidance for less-technical partners.
• Agentic security tooling and agent infrastructure: Build, evaluate and maintain the agents behind our reviews, triage and investigations.
• Detection, investigation and response: Lead cloud and infrastructure alerts and incidents through to resolution and root cause.
• Identity, access and least privilege: Move people, CI and services toward least privilege and just-in-time access.
• Compute, network and pipeline security: Harden our workloads, network perimeter and CI/CD pipelines.
• Continuous review and audit evidence: Move vulnerability, access and attack-surface reviews to continuous monitoring.

Qualifications

• 5+ years in security engineering, cloud infrastructure or SRE, with at least 2 years securing AWS at organization scale.
• At least a year of agentic development experience.
• Deep AWS IAM experience.
• Production Kubernetes security on EKS or similar.
• AWS networking for security.
• Fluency with infrastructure as code such as Terraform.
• Experience with CNAPP, SIEM or runtime security tooling.
• Experience investigating cloud and infrastructure security events.
• A track record of reviewing architecture and writing design proposals.
• Python, Go or TypeScript for security automation.
• Clear written and verbal communication skills.

Requirements

• Experience using AI agents in a SOC or other incident response workflows.
• Sandboxed runtime experience with gVisor, Firecracker or Kata.
• Offensive security or red-team experience in cloud and Kubernetes environments.
• Policy engines such as OPA or Rego.
• Supporting audits like SOC 2 with automated evidence collection.

Benefits

• Equal Opportunity Employer: ClickUp is an Equal Opportunity Employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.
• Privacy Notice: ClickUp collects and processes personal data in accordance with applicable data protection laws.
• Visa Sponsorship: Please note we are unable to sponsor or take over sponsorship of an employment visa for roles outside of engineering and product at this time.
• Fraud Alert: ClickUp Talent Acquisition will only initiate contact via an @clickup.com email or through our official careers portal.
• AI Processing Notice: ClickUp may use artificial intelligence and machine learning technologies to help review and screen candidates' employment applications.