Senior Security Engineer, DFIR

Location: United States; remote

Salary: $160K–$210K annually

Company

ClickUp is building an AI-native workspace that unifies tasks, docs, chat, calendar, and enterprise search.

What you will do

• Investigate threats and security incidents affecting the ClickUp platform and internal systems, analyze evidence, determine impact, and drive remediation through root cause.
• Investigate platform abuse, identify threat indicators and recurring patterns, and develop actionable threat intelligence.
• Build and improve AI-assisted and agentic workflows for incident response, digital forensics, and audits while validating outputs and maintaining human review and access controls.
• Design, develop, and deploy product defenses, security controls, response tooling, and automated checks.
• Partner with engineering, product, data, and operations teams, communicate findings with evidence, and mentor others on security topics.

Requirements

• Multiple years of experience in technology or software development, including building and maintaining tooling or automation for operational problems.
• Practical experience with AI-assisted development or agentic workflows for engineering or security, including validating outputs and recognizing when human review is required.
• Experience investigating security threats or platform abuse through logs and other evidence, identifying threat indicators, and explaining findings and impact.
• Ability to translate security findings into practical software design changes, response improvements, or automated controls.
• Experience with cloud or SaaS systems and their application, identity, or audit data.
• Clear written communication supported by evidence, plus the ability to build relationships and mentor others on technical topics.

Nice to have

• Experience using AI agents in SOC or incident response workflows.
• Understanding of agent security risks, including the confused deputy problem and the lethal trifecta.
• Ability to facilitate conversations rather than dictate them.
• 3+ years of software development experience and 1+ year of security-specific experience.
• Experience with SAST, DAST, RASP, dependency checkers, and SIEM.
• 1 year of AWS experience, including IAM and least-privilege architectures.

Culture & Benefits

• Engineering-focused security organization partnering across the company to protect the platform, internal systems, and customers.
• AI fluency and daily use of AI are expected and evaluated during hiring.
• Remote work from the United States.
• Employment opportunity with equal consideration regardless of protected characteristics.
• Engineering and product visa sponsorship may be available based on role-specific business needs but is not guaranteed.