Senior Security Engineer, DFIR

Career Tools

About This Role

ClickUp is an AI-native organization developing a converged workspace platform that brings together documents, calendars, chat, enterprise search, and task management. Every staff member at the company incorporates artificial intelligence into their daily routines, and candidate evaluations include an assessment of AI fluency. The company seeks a Senior Security Engineer, DFIR to join an engineering-focused security team. In this position, the professional will investigate security incidents and platform abuse affecting…

Job Description

Responsibilities

• Investigate threats impacting internal systems and the ClickUp platform by gathering and analyzing evidence to establish incident impact and root causes.
• Manage investigations from initial findings through remediation, working alongside the teams that own the affected systems.
• Identify and respond to platform abuse by discovering threat patterns and developing actionable threat intelligence to prevent recurring incidents.
• Build and enhance AI-assisted and agentic workflows for digital forensics, incident response, and ongoing security audits.
• Automate repetitive investigative tasks while validating outputs against evidence and maintaining human review for consequential actions.
• Design, develop, and deploy software changes, automated checks, and response tooling to protect products and internal infrastructure.
• Collaborate with engineering, product, data, and operations departments as a security player-coach to help teams build practical defenses.

Requirements

• Multiple years of background in technology or software development, including the creation and maintenance of automation or tooling for operational challenges.
• Practical background utilizing AI-assisted development or agentic workflows for engineering or security tasks, with the ability to validate outputs and determine when human review is required.
• Experience examining security threats or platform abuse through log analysis, evidence review, and threat indicator identification.
• Capacity to convert security findings into software design modifications, response enhancements, or automated controls.
• Background operating within cloud or SaaS systems, including the use of audit, identity, or application data to inspect suspicious behavior.
• Proficiency in written communication to produce evidence-backed findings and recommendations that other teams can implement.
• Skill in building relationships and mentoring others regarding technical subjects and security.

Qualifications

• Experience deploying AI agents within a security operations center or incident response pipelines.
• Familiarity with agent security vulnerabilities, such as the confused deputy problem and the lethal trifecta.
• Ability to facilitate conversations rather than dictate them.
• Three or more years of software development background paired with at least one year of security-focused experience.
• Familiarity with security utilities such as SAST, DAST, RASP, dependency checkers, and SIEM platforms.
• One year of AWS experience, including least-privilege architectures and IAM.

Core Skills

Frequently Asked Questions

Answers are based only on the employer’s listing; where it doesn’t say, neither do we.

Sample Interview Questions

AI-generated questions tailored to this specific role — a preview of the full practice set.