Senior Security Engineer, Infrastructure Security
ClickUp · United States
About this role
## Senior Security Engineer, Infrastructure Security ### About ClickUp At ClickUp, we’re building the future of work: the first truly converged AI workspace unifying tasks, docs, chat, calendar, and enterprise search—supercharged by context-driven AI. We’re an AI-native company where every team member is expected to leverage AI daily. ### Security at ClickUp Security at ClickUp is engineering-focused. We partner across the company to protect our platform, internal systems, and customers through secure design, defensive controls, detection, and response. We build tooling and automation (including AI-powered workflows) to turn what we learn into lasting improvements. ### About the Team: Infrastructure Security Infrastructure Security secures the cloud, compute, network, and access layers underneath ClickUp: - Multi-account AWS organization - Large Kubernetes fleet - Infrastructure managed as code - Identity systems used to reach production We’re a small team that works agentic-first—using AI agents we build and maintain ourselves to multiply what a team our size can cover. ### What You’ll Do - **Architecture, proposals, and reviews** - Act as an initial reviewer on infrastructure proposals and designs from engineering and non-engineering teams. - Write security proposals and review follow-on changes. - Translate security requirements and agent findings into clear guidance for less-technical partners. - **Agentic security tooling and agent infrastructure** - Build, evaluate, and maintain the agents behind reviews, triage, and investigations. - Help run the sandboxed, observable infrastructure those agents operate on. - **Detection, investigation, and response** - Lead cloud and infrastructure alerts and incidents through resolution and root cause. - Partner with AppSec and incident response on incidents spanning multiple areas. - **Identity, access, and least privilege** - Move people, CI, and services toward least privilege and just-in-time access across the cloud organization and engineering tooling. - Deliver secure building blocks teams adopt by default. - **Compute, network, and pipeline security** - Harden container, serverless, and VM workloads, network perimeter, and CI/CD pipelines. - Add checks so each class of issue is caught automatically next time. - **Continuous review and audit evidence** - Move vulnerability, access, and attack-surface reviews from point-in-time checks to continuous monitoring that produces evidence for infrastructure controls. ### Qualifications - **5+ years** in security engineering, cloud infrastructure, or SRE, including **2+ years securing AWS at organization scale**. - **Agentic development experience (1+ year):** building agent skills/tools for real engineering work and maintaining the development harness (configuration/permissions, integrations, evaluations, cost controls). - Secure agents against prompt injection, over-privileged tools, and unaudited actions. - Explain agent risks (e.g., confused deputy problem / lethal trifecta) and validate agent output against evidence. - **Deep AWS IAM experience:** IAM Identity Center (or equivalent SSO), SCPs, permission boundaries, resource/key policies, cross-account trust, and ability to prove policy effects via simulation. - **Production Kubernetes security on EKS (or similar):** RBAC, workload identity, network policy, admission control, and container runtime hardening. - **AWS networking for security:** VPC design, endp
Listing freshness
CronJobs last confirmed this listing 52m ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.