Senior Security Engineer, DFIR
ClickUp · United States
About this role
## Senior Security Engineer, DFIR ### About ClickUp At ClickUp, we’re building the future of work: the first truly converged AI workspace unifying tasks, docs, chat, calendar, and enterprise search—supercharged by context-driven AI. We’re an AI-native company, and every team member is expected to leverage AI daily. ### Security at ClickUp Security at ClickUp is engineering-focused. We partner across the company to protect our platform, internal systems, and customers through secure design, defensive controls, detection and response. We build tooling and automation (including AI-powered workflows) to turn what we learn into lasting improvements. ### About the Team (Application Security) Application Security investigates threats, platform abuse, and security incidents affecting our product and internal systems. We turn investigation findings into response tooling, automation, and stronger product defenses—partnering with engineering and product teams to prevent repeat issues. This is an engineering-first team using AI tools and agentic workflows to improve how we investigate and respond. --- ## What You’ll Do ### Digital forensics & incident response - Investigate threats affecting the ClickUp platform and internal systems - Collect and analyze relevant evidence to determine what happened and its impact - Lead investigations through findings, response, and root cause, partnering with owning teams to drive remediation to completion ### Platform abuse investigations - Identify and respond to abuse of the ClickUp platform - Uncover threat indicators and recurring patterns - Develop actionable threat intelligence and use findings to improve detection and prevent repeat abuse ### Agentic security tooling - Build and improve AI-assisted and agentic workflows for incident response, digital forensics, and ongoing audits - Automate repeatable investigation work - Validate outputs against evidence and ensure human review and appropriate access controls for consequential actions ### Product defenses & security controls - Design, develop, and deploy controls that protect our product and internal systems - Convert investigation findings into software changes, response tooling, and automated checks that address the underlying issue ### Engineering partnership - Work directly with engineering, product, data, and operations as a security player-coach - Explain observed threats with clear evidence - Help teams design practical defenses and mentor others so improvements last beyond a single investigation --- ## Qualifications - Multiple years of experience in technology or software development, including building/maintaining tooling or automation that solves operational problems - Practical experience using AI-assisted development or agentic workflows for engineering or security work, with the ability to validate outputs and recognize when human review is needed - Experience investigating security threats or platform abuse (logs/evidence, threat indicators, explaining findings and impact) - Ability to translate security findings into practical software design changes, response improvements, or automated controls - Experience with cloud or SaaS systems, including using application, identity, or audit data to investigate suspicious activity - Clear written communication with evidence-backed findings and recommendations - Ability to build relationships and mentor others on technical topics, including security --- ## Desirable - Experience using
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.