Remote opportunity at
ClickUpSenior Security Engineer, Infrastructure Security
ClickUp operates as an AI-native company building a converged workspace that unifies tasks, documentation, chat, calendars, and enterprise search through context-driven artificial intelligence. Every member of…
Career Tools
About This Role
ClickUp operates as an AI-native company building a converged workspace that unifies tasks, documentation, chat, calendars, and enterprise search through context-driven artificial intelligence. Every member of the organization leverages AI on a daily basis, and AI fluency is evaluated during the recruitment process. The Infrastructure Security team secures the cloud, compute, network, and access layers that support ClickUp. Operating as a small, agentic-first unit, the team builds and maintains custom…
Job Description
ClickUp operates as an AI-native company building a converged workspace that unifies tasks, documentation, chat, calendars, and enterprise search through context-driven artificial intelligence. Every member of the organization leverages AI on a daily basis, and AI fluency is evaluated during the recruitment process.
The Infrastructure Security team secures the cloud, compute, network, and access layers that support ClickUp. Operating as a small, agentic-first unit, the team builds and maintains custom AI agents to multiply its coverage across a multi-account AWS organization and a large Kubernetes fleet. The Senior Security Engineer role involves protecting platform architecture, internal systems, and customer data using secure design, defensive controls, and detection tooling.
This position suits a developer-minded security professional who can break down engineering challenges, test automation approaches, and implement solutions with compounding value. Daily work emphasizes asynchronous collaboration, writing clear proposals, developing agentic tooling, and translating security needs into practical guidance for both technical and non-technical partners.
Responsibilities
- Review infrastructure proposals and designs from engineering, business systems, and go-to-market teams while writing internal security proposals and changes
- Translate security requirements and agent findings into actionable guidance for less-technical partners
- Build, evaluate, and maintain the AI agents used for reviews, triage, and investigations alongside their sandboxed, observable operating infrastructure
- Lead cloud and infrastructure alerts and incidents through resolution and root cause analysis in partnership with AppSec and incident response teams
- Implement least privilege and just-in-time access for personnel, continuous integration, and services across the cloud organization and engineering tools
- Harden container, serverless, virtual machine workloads, network perimeters, and CI/CD pipelines to ensure automated issue prevention
- Transition vulnerability, access, and attack-surface reviews from point-in-time checks to continuous monitoring that generates infrastructure control evidence
Requirements
- Minimum of 5 years of experience in security engineering, cloud infrastructure, or SRE
- At least 2 years of experience securing AWS at organization scale
- Minimum of 1 year of agentic development experience building agent skills, tools, and maintenance harnesses
- Deep AWS IAM experience including IAM Identity Center, SCPs, permission boundaries, and policy simulation
- Production Kubernetes security experience on EKS or similar platforms covering RBAC, workload identity, and network policies
- Proficiency in AWS networking security including VPC design, firewalls, egress control, and WAF
- Fluency with infrastructure as code tools like Terraform for multi-environment rollouts and security reviews
- Experience with CNAPP, SIEM, or runtime security tooling alongside cloud detection sources like CloudTrail and GuardDuty
- Demonstrated track record of investigating cloud events, reviewing architecture, and guiding teams through secure designs
- Proficiency in Python, Go, or TypeScript for security automation
Qualifications
- Experience utilizing AI agents within SOC or incident response workflows
- Familiarity with sandboxed runtime environments such as gVisor, Firecracker, or Kata
- Offensive security or red-team experience in cloud and Kubernetes environments
- Familiarity with policy engines like OPA or Rego
- Experience supporting compliance audits such as SOC 2 through automated evidence collection
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this a remote position?
Yes, the posting specifies that the role is remote.
What is the salary range for this position?
The salary ranges from USD 160,000 to 210,000 per year.
What employment type is this role?
The position is full-time.
How does ClickUp handle application communications and fraud safety?
ClickUp Talent Acquisition only initiates contact through an @clickup.com email address or their official careers portal, and will never request fees, payments, or sensitive personal information.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
