---
title: 'Senior Security Engineer, Infrastructure Security at ClickUp'
canonical: 'https://feeny.ai/job/senior-security-engineer-infrastructure-security-clickup-united-states-a0nnmtdy3gqf'
type: 'job'
last_seen: '2026-11-08'
---

# Senior Security Engineer, Infrastructure Security at ClickUp

- **Company:** [ClickUp](https://feeny.ai/companies/clickup)
- **Location:** United States
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-11-06
- **Last confirmed live:** 2026-11-08
- **Apply:** https://jobs.ashbyhq.com/clickup/f919c7fa-88b9-4c7d-9990-153cd26e014f

## Job description

At ClickUp, we're building the future of work: the first truly converged AI workspace unifying tasks, docs, chat, calendar, and enterprise search, all supercharged by context-driven AI. We are an AI-native company. Every team member is expected to leverage AI daily, and we evaluate AI fluency as part of our hiring process. Join us and help redefine what's possible. 🚀

Security at ClickUp Security at ClickUp is engineering-focused. We partner with teams across the company to protect our platform, our internal systems and our customers through secure design, defensive controls, detection and response. We build tooling and automation, including AI-powered workflows, to turn what we learn into lasting improvements.

## About the team

Infrastructure Security at ClickUp secures the cloud, compute, network and access layers underneath ClickUp: a multi-account AWS organization, a large Kubernetes fleet, infrastructure managed as code and the identity systems engineers use to reach production. We are a small team that works agentic first, using AI agents we build and maintain ourselves to multiply what a team our size can cover.

You will support this mission by thinking like a developer, breaking down a problem that we face, testing a method to approach it with automation, and implementing solutions that yield compounding value. Your skills to uncover threat indicators will be the foundation of this work.

## The role

- Architecture, proposals and reviews. Act as an initial reviewer on infrastructure proposals and designs from engineering and non-engineering teams such as business systems and go-to-market. Write our own security proposals and review the changes that follow. Translate security requirements and agent findings into clear guidance for less-technical partners, and bring their needs back into our designs.
- Agentic security tooling and agent infrastructure. Build, evaluate and maintain the agents behind our reviews, triage and investigations, and help run the sandboxed, observable infrastructure they operate on.
- Detection, investigation and response. Lead cloud and infrastructure alerts and incidents through to resolution and root cause, working alongside AppSec and incident response on incidents that span both.
- Identity, access and least privilege. Move people, CI and services toward least privilege and just-in-time access across our cloud organization and the tooling engineers use to reach production. Deliver fixes as secure building blocks that teams adopt by default.
- Compute, network and pipeline security. Harden our container, serverless and virtual machine workloads, our network perimeter and our CI/CD pipelines, and add checks so each class of issue is caught automatically next time.
- Continuous review and audit evidence. Move vulnerability, access and attack-surface reviews from point-in-time checks to continuous monitoring that also produces evidence for our infrastructure controls.

## Qualifications

- 5+ years in security engineering, cloud infrastructure or SRE, with at least 2 years securing AWS at organization scale.
- At least a year of agentic development experience: building agent skills and tools for real engineering work, and developing and maintaining the development harness they run in, from configuration and permissions to integrations, evaluations and cost controls. You can secure agents against prompt injection, over-privileged tools and unaudited actions, and explain how agents fall into the confused deputy problem and the lethal trifecta. You validate agent output against evidence and decide where human review is required.
- Deep AWS IAM experience: IAM Identity Center or an equivalent SSO model, SCPs, permission boundaries, resource and key policies, cross-account trust, and the ability to prove a policy's effect with simulation rather than inference.
- Production Kubernetes security on EKS or similar, covering RBAC, workload identity, network policy, admission control and container runtime hardening.
- AWS networking for security: VPC design, endpoints and endpoint policies, network and DNS firewalls, egress control, and WAF.
- Fluency with infrastructure as code such as Terraform, including reusable patterns, multi-environment rollouts and reading plans for security impact.
- Experience with CNAPP, SIEM or runtime security tooling and the cloud detection sources around it, such as CloudTrail, GuardDuty and Access Analyzer.
- Experience investigating cloud and infrastructure security events: correlating cloud audit, Kubernetes, identity and network logs to establish what happened, its blast radius and its root cause.
- A track record of reviewing architecture and writing design proposals, guiding teams toward secure designs through conversation rather than mandate, mentoring others through reviews, and turning a review into a change another team is glad to make.
- Python, Go or TypeScript for security automation.
- Clear written and verbal communication, including explaining technical risk to non-technical partners. Most of our work with other teams is asynchronous, so much of the job is a well-evidenced finding, proposal or design note that another team can act on without a meeting.

Desirable

- Experience using AI agents in a SOC or other incident response workflows.
- Sandboxed runtime experience with gVisor, Firecracker or Kata.
- Offensive security or red-team experience in cloud and Kubernetes environments.
- Policy engines such as OPA or Rego.
- Supporting audits like SOC 2 with automated evidence collection.

## Our stack

AWS, Kubernetes, infrastructure as code, CI/CD with federated identity, an enterprise identity provider, observability and cloud security platforms, and AI agent tooling.

## Equal Opportunity Employer

ClickUp is an Equal Opportunity Employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.

Privacy Notice ClickUp collects and processes personal data in accordance with applicable data protection laws. You can find further details by viewing our [Global Candidate Privacy Notice.](https://clickup.com/careers-terms/candidate-privacy-notice) If you are a Philippine Job Applicant, please also see our [Philippine Data Privacy Notice](https://t333.s.clickup-attachments-stg.com/t333/d9a53ce2-6d2c-48cd-84b1-ed4e525f9613/Philippine%20Data%20Privacy%20Notice_2024.pdf?view=open) for further details.

Visa Sponsorship Please note we are unable to sponsor or take over sponsorship of an employment visa for roles outside of engineering and product at this time. Sponsorship for engineering and product roles is not guaranteed, but is instead based on the business needs for that specific role at that time. Please reach out to the recruiter with any questions.

Fraud Alert ClickUp Talent Acquisition will only initiate contact via an @[clickup.com](http://clickup.com) email or through our official careers portal on [clickup.com](http://clickup.com). We will never request fees, payments, or sensitive personal information. Please disregard any offers received outside these channels and report them to support@clickup.com.

AI Processing Notice ClickUp may use artificial intelligence and machine learning technologies to help review and screen candidates' employment applications against role-related criteria. These tools support, but do not replace, human decision‑making. If you have questions or need an accommodation in the recruitment process, please contact us at AskPeople@ClickUp.com.

## About ClickUp

## Company Overview
- **One-liner**: ClickUp provides an all-in-one productivity platform that replaces fragmented work tools with a unified solution for tasks, documents, collaboration, and AI-powered agents.
- **Entity Type**: Private (Series C)
- **Headquarters**: San Diego, California, USA
- **Founded**: 2016
- **Founders**: Zeb Evans and Alex Yurkowski

## Core Business
- **Primary industry**: Productivity Software / Project Management / AI Agents
- **Target customers**: B2B, serving teams of all sizes from SMBs to 85% of the Fortune 500 [clickup.com]
- **Mission**: Maximize human productivity by fundamentally reinventing how work gets done through the convergence of software, AI, and humans [clickup.com/careers]

## Products & Services
- **ClickUp Platform**: The core product — an everything app for work combining tasks, docs, chat, whiteboards, goals, timelines, and 100+ product replacements [clickup.com]
- **Brain²**: ClickUp’s AI engine that intelligently routes tasks to the best frontier model (GPT, Claude Opus, Gemini, etc.) with full workspace context, memory, and preferences [clickup.com]
- **Super Agents**: Configurable AI agents that automate workflows — including PM Agent, Assign Agent, and Live Answers Agent — with the ability to build custom agents using any MCP (Model Context Protocol) connection [clickup.com]
- **ClickUp Apps**: Integrations with Google Drive, GitHub, Salesforce, Slack, and thousands of other tools [clickup.com]

## Market Standing
- **Valuation**: $4 billion (latest round, per Tracxn) [tracxn.com]
- **Total Funding**: $535 million raised [tracxn.com]
- **Key Metric**: Over 5 million teams use ClickUp; 85% of Fortune 500 companies are customers [clickup.com]
- **Notable Investors**: Andreessen Horowitz, Tiger Global Management, Craft Ventures [tracxn.com]
- **Growth Signals**: 1,529 employees as of March 2026; strong adoption of AI agents with 3M+ tasks automated; Forrester TEI study reports 384% ROI and payback in under 6 months for customers [tracxn.com, clickup.com]

## Competitive Advantages
- **Convergence over bundling**: Unlike competitors who bolt together separate tools, ClickUp was built from the ground up as one unified platform, giving Brain² full context across all work types (tasks, docs, conversations, files) — context that competitor AI tools lack [clickup.com/about]
- **Model-agnostic AI**: Brain² intelligently routes each query to the best frontier model (GPT, Claude, Gemini, etc.), delivering optimal performance without vendor lock-in [clickup.com]
- **Enterprise-grade security**: SOC 2 Type II, ISO 27001, GDPR, and HIPAA compliant, with AI privacy protections exceeding standard enterprise SaaS [clickup.com]
- **Massive product surface area**: 100+ products in one platform means customers can consolidate an entire tech stack, creating deep switching costs

## Strategic Focus
- **AI-first convergence**: Deep investment in AI agents (Super Agents) and ambient intelligence that anticipates user needs rather than just responding to commands [clickup.com]
- **Platform expansion**: Continuing to absorb adjacent tool categories (chat, docs, whiteboards, goals) to eliminate toggling between apps [clickup.com/careers]
- **Enterprise scale**: Targeting larger deployments with proven ROI data and robust compliance/security posture

## Why Work Here
- **Culture & values**: The company emphasizes grit, growth mindset (“grow 1% every day”), passion, and hard work. Core value: “Normal f*cking sucks” — a rejection of status quo thinking [clickup.com/careers]
- **Impact**: Employees are empowered to work across AI, product, and engineering — “you don’t need to be an engineer to dive deep into leveraging AI” [clickup.com/careers]
- **Work model**: Remote-friendly with offices in San Diego (HQ), United States, Canada, Ireland, United Kingdom, Australia, and globally [clickup.com/about]
- **Perks**: Generous PTO, health plans, retirement benefits, wellness programs, and parental leave [clickup.com/careers]
- **Growth**: The company explicitly hires for potential impact and supports “building your boldest career”; recent headcount of 1,529 signals continued scaling [tracxn.com, clickup.com/careers]

## Sources
1. [ClickUp Careers Page](https://clickup.com/careers)
2. [ClickUp About Page](https://clickup.com/about)
3. [ClickUp Homepage](https://clickup.com/)
4. [Tracxn Company Profile](https://tracxn.com/d/companies/clickup/__lm2pfON0Ef7h6Fu5h9GkLd9_fspnDEnBOL2bEKJxWkg)

## Other roles at ClickUp

- [Senior AI Developer](https://feeny.ai/job/senior-ai-developer-clickup-united-states-m45fym7tkmgn) — United States
- [Senior Security Engineer, DFIR](https://feeny.ai/job/senior-security-engineer-dfir-clickup-united-states-fbff9qt3rj0f) — United States
- [Senior Backend Engineer](https://feeny.ai/job/senior-backend-engineer-clickup-czechia-rng7wn4r8gdm) — Czechia
- [Strategic Solutions Engineer](https://feeny.ai/job/strategic-solutions-engineer-clickup-australia-4s68h0ejy5p4) — Australia
- [Senior Solutions Engineer, Commercial](https://feeny.ai/job/senior-solutions-engineer-commercial-clickup-united-states-6szyk4231cnc) — United States
- [Manager, Technical Account Management](https://feeny.ai/job/manager-technical-account-management-clickup-australia-cjty5j410q5q) — Australia
- [Enterprise Account Executive - DACH](https://feeny.ai/job/enterprise-account-executive-dach-clickup-dublin-0m1554807s5t) — Dublin, Ireland
- [Business Development Representative (AMER)](https://feeny.ai/job/business-development-representative-amer-clickup-san-diego-s75948kcen6f) — San Diego, CA
- [Senior Database Reliability Engineer](https://feeny.ai/job/senior-database-reliability-engineer-clickup-poland-d7e2j8a19d8e) — Poland
- [Senior Strategic Finance Specialist](https://feeny.ai/job/senior-strategic-finance-specialist-clickup-united-states-4xtxtx931k2z) — United States