Senior Security Engineer, Infrastructure

ClickUp is the world's only all-in-one productivity platform that flexes to the way people want to work. It replaces all individual workplace productivity tools with a single, unified platform including project management, document collaboration, spreadsheets, chat, goals, and more. On a mission to make the world more productive, ClickUp is headquartered in San Diego and scaling remotely and internationally. As one of the fastest-growing SaaS companies in the world, ClickUp helps millions of users to be more productive and save at least one day every week. 🦄

We're looking for a Security Engineer, InfraSec for our engineering-focused security team. We partner with and embed inside of existing engineering teams at ClickUp. The security team at ClickUp works to build and share technology including defensive security features and functionality, secure infrastructure and operational tools, security response tooling and processes, and security guidelines and guardrails.

You will work to build a culture of security enablement. Your focus on our infrastructure engineers will allow them to build and ship secure products within AWS, and with our IT engineers to deploy and secure our enterprise system integrations.

The Role:

Perform some or all of the following, depending on skill-set:

• Monitor and analyze production security events and, as needed, provide in-depth incident analysis.
• Design and build tools to help with all stages in security prevention, detection, and response; across the full SDLC from code and test, through to deploy and operate.
• Build security automation for and into the ClickUp platform; design and build secure-by-default infrastructure and applications.
• Design and build security features and defenses that protect the entire scope of the ClickUp platform and infrastructure; like public cloud account governance and access management.
• Build relationships with other engineers, product managers, data engineers, IT operators, and security team members to enable shipping a secure product.
• Embed yourself into existing engineering, product, and IT teams, acting as a "security player-coach".
• Perform threat models, implementation reviews, and security testing; review requirements and designs.

Qualifications:

• An understanding of security problems, paired with an ability to suggest solutions to software design problems.
• Multiple years of AWS experience (GCP or Azure); IAM and least-privilege architectures.
• An ability to identify and provide a basic assessment of security threats.
• Cloud and SaaS experience.
• Multiple years of experience in technology / software development.
• Ability to mentor others on technical topics, including security.

Desirable:

• Past experience with pushing technical initiatives; team, project, or indirect management of technology.
• Experience with Angular, Node.js, and PostgreSQL; or similar technologies.
• Experience with AWS Control Tower and Account Factory, AWS Service Control Policies, AWS Organizations.
• Infrastructure & configuration as code technologies such as Terraform, CDK, and Ansible
• If you are a software engineer who is only starting on learning security, please do apply!
• 5+ years of software development experience and 1+ year of security-specific experience.

ClickUp was founded on a culture of hard work, consistent growth, and a desire to break norms. We’re a values-driven company and hire based on ambition, merit, and a willingness to do what it takes to succeed. We don’t care where you’re from, what you look like, or who you’re in a relationship with—we hire the best people for the job, and create an environment that supports employees on their journey to do the most exciting work of their lives! ClickUp is an Equal Opportunity Employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.