Senior Security Engineer, Infrastructure Security (AWS)

Location: United States; remote

Salary: $160K–$210K per year

Company

ClickUp is building an AI-native workspace that unifies tasks, documents, chat, calendars, enterprise search, and context-driven AI.

What you will do

• Review infrastructure proposals and designs, write security proposals, and translate security requirements and agent findings into actionable guidance.
• Build, evaluate, maintain, and secure agentic tooling for reviews, triage, and investigations, including sandboxed and observable agent infrastructure.
• Lead cloud and infrastructure alerts and incidents through investigation, resolution, and root-cause analysis.
• Advance least-privilege and just-in-time access for people, CI, services, and production tooling across the cloud organization.
• Harden containers, serverless and virtual-machine workloads, network perimeters, and CI/CD pipelines with automated security checks.
• Move vulnerability, access, and attack-surface reviews toward continuous monitoring and automated audit evidence.

Requirements

• 5+ years of experience in security engineering, cloud infrastructure, or SRE, including at least 2 years securing AWS at organization scale.
• At least 1 year of agentic development experience, including agent skills and tools, development harnesses, configuration, permissions, integrations, evaluations, and cost controls.
• Ability to secure agents against prompt injection, over-privileged tools, and unaudited actions; explain confused deputy and lethal trifecta risks; validate outputs against evidence; and determine when human review is required.
• Deep AWS IAM experience covering IAM Identity Center or equivalent SSO, SCPs, permission boundaries, resource and key policies, cross-account trust, and policy simulation.
• Production Kubernetes security on EKS or similar, including RBAC, workload identity, network policy, admission control, and container runtime hardening.
• AWS networking security experience with VPCs, endpoints and endpoint policies, network and DNS firewalls, egress control, and WAF.
• Infrastructure-as-code fluency, such as Terraform, including reusable patterns, multi-environment rollouts, and security-impact analysis of plans.
• Experience with CNAPP, SIEM, runtime security tooling, CloudTrail, GuardDuty, Access Analyzer, and investigations correlating cloud, Kubernetes, identity, and network logs.
• Track record of architecture reviews, design proposals, collaborative security guidance, mentoring through reviews, technical communication, and Python, Go, or TypeScript security automation.

Nice to have

• Experience using AI agents in SOC or incident-response workflows.
• Sandboxed runtime experience with gVisor, Firecracker, or Kata.
• Cloud or Kubernetes offensive security or red-team experience.
• Experience with OPA or Rego policy engines.
• Experience supporting SOC 2 audits through automated evidence collection.

Culture & Benefits

• Remote work arrangement for a full-time engineering role based in the United States.
• Security work is engineering-focused and delivered through tooling, automation, secure design, and defensive controls.
• Teams work asynchronously, with emphasis on well-evidenced findings, proposals, and design notes that can be acted on without meetings.
• AI fluency and daily use of AI are expected and assessed during hiring.
• Visa sponsorship for engineering roles is not guaranteed and depends on business needs for the specific role.

Hiring process

• AI fluency is evaluated as part of the hiring process.