160K–210K USD / year
Senior Security Engineer, DFIR
OtherRemote — United States
Published on 2026-11-06
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Investigate security incidents and platform abuse affecting ClickUp’s product and internal systems. Turn investigation findings into security controls, response tooling, automation, and stronger product defenses, including AI-assisted workflows with appropriate human review.
About the company
ClickUp is a work management platform that combines tasks, docs, goals, and collaboration tools for teams running projects across functions.
The team
Application Security
Stack
AWSIAMSASTDASTRASPSIEM
What you'll do
- Lead digital forensics and incident response investigations through root cause and remediation.
- Investigate platform abuse, identify threat indicators, and develop actionable threat intelligence.
- Build and improve AI-assisted and agentic workflows for incident response, forensics, and audits.
- Develop product and internal-system security controls, response tooling, and automated checks.
- Partner with engineering, product, data, and operations teams; communicate findings and mentor others.
What we're looking for
- Experience building and maintaining software tooling or automation for operational problems.
- Practical experience with AI-assisted development or agentic workflows and validating their outputs.
- Experience investigating security threats or platform abuse using logs and other evidence.
- Ability to translate security findings into software changes, response improvements, or automated controls.
- Experience with cloud or SaaS systems and their application, identity, or audit data.
- Clear written communication, relationship-building, and mentoring skills.
Nice to have
- Experience using AI agents in SOC or incident response workflows.
- Understanding of agent security risks, including the confused deputy problem and lethal trifecta.
- Three or more years of software development experience and at least one year in security.
- Experience with SAST, DAST, RASP, dependency checkers, or SIEM.
- At least one year of AWS experience, including IAM and least-privilege architectures.
Benefits
- Equity
- 401(k)
- Health, dental, and vision insurance
- Paid parental leave
- Flexible paid time off
- Wellness and professional development stipends