160K–210K USD / year
Senior Security Engineer, Infrastructure Security
DevOpsRemote — United States
Published on 2026-11-06
These details were extracted automatically from the original listing. They may not be complete or fully up to date — it's worth checking the original job post.
About this role
Secure ClickUp’s cloud, compute, network, and identity infrastructure across a multi-account AWS organization and Kubernetes fleet. The role combines infrastructure security engineering, incident response, least-privilege access design, and development of AI-agent-powered security tooling.
About the company
ClickUp is a work management platform that combines tasks, docs, goals, and collaboration tools for teams running projects across functions.
The team
Infrastructure Security
Stack
AWSKubernetesEKSTerraformCI/CDPythonGoTypeScript
What you'll do
- Review infrastructure proposals and designs, and write security proposals and implementation guidance.
- Build, evaluate, and maintain AI agents for security reviews, triage, and investigations.
- Lead cloud and infrastructure alert investigations and incidents through resolution and root cause.
- Improve least-privilege and just-in-time access for people, CI, and services.
- Harden workloads, network perimeters, and CI/CD pipelines, adding automated security checks.
- Develop continuous vulnerability, access, and attack-surface monitoring with audit evidence.
What we're looking for
- 5+ years in security engineering, cloud infrastructure, or SRE, including 2+ years securing AWS at organization scale.
- At least 1 year building and maintaining agents and their development harnesses for real engineering work.
- Strong AWS IAM expertise, including Identity Center or equivalent, SCPs, permission boundaries, policies, and cross-account trust.
- Production Kubernetes security experience, including RBAC, workload identity, network policy, admission control, and runtime hardening.
- Knowledge of AWS security networking, including VPCs, endpoints, firewalls, egress controls, and WAF.
- Infrastructure-as-code fluency, such as Terraform, and experience with cloud security or detection tooling.
- Experience investigating cloud security events and correlating audit, Kubernetes, identity, and network logs.
- Ability to review architecture, write proposals, communicate technical risk, and automate security with Python, Go, or TypeScript.
Nice to have
- Experience using AI agents in SOC or incident-response workflows.
- Sandboxed runtime experience with gVisor, Firecracker, or Kata.
- Cloud and Kubernetes offensive security or red-team experience.
- Experience with OPA or Rego policy engines.
- Automated evidence collection for audits such as SOC 2.
Benefits
- Equity
- 401(k)
- Health, dental, and vision insurance
- Paid parental leave
- Flexible paid time off
- Wellness and professional development stipends