Senior Security Engineer, DFIR

📋 Job Overview

At ClickUp, we're building the future of work: the first truly converged AI workspace unifying tasks, docs, chat, calendar, and enterprise search, all supercharged by context-driven AI. We are an AI-native company. Every team member is expected to leverage AI daily, and we evaluate AI fluency as part of our hiring process. Join us and help redefine what's possible. 🚀

🏢 About ClickUp

Security at ClickUp is engineering-focused. We partner with teams across the company to protect our platform, our internal systems and our customers through secure design, defensive controls, detection and response. We build tooling and automation, including AI-powered workflows, to turn what we learn into lasting improvements.

🎯 The Role

Application Security at ClickUp investigates threats, platform abuse and security incidents affecting our product and internal systems. We turn investigation findings into response tooling, automation and stronger product defenses, partnering with engineering and product teams to prevent repeat issues. This is an engineering-first team that uses AI tools and agentic workflows to improve how we investigate and respond.

✅ Key Responsibilities

• Digital forensics and incident response. Investigate threats affecting the ClickUp platform and internal systems, collect and analyze relevant evidence, and establish what happened and its impact.
• Platform abuse investigations. Identify and respond to abuse of the ClickUp platform. Uncover threat indicators and recurring patterns, develop actionable threat intelligence, and use the findings to improve detection and prevent repeat abuse.
• Agentic security tooling. Build and improve AI-assisted and agentic workflows for incident response, digital forensics and ongoing audits.
• Product defenses and security controls. Design, develop and deploy controls that protect our product and internal systems.
• Engineering partnership. Work directly with engineering, product, data and operations teams as a security player-coach.

📌 Required Qualifications

• Multiple years of experience in technology or software development, including building and maintaining tooling or automation that solves operational problems.
• Practical experience using AI-assisted development or agentic workflows for engineering or security work, with an ability to validate their output and recognize when human review is needed.
• Experience investigating security threats or platform abuse: analyzing logs and other evidence, identifying threat indicators, and explaining findings and impact.
• Ability to translate a security finding into a practical software design change, response improvement or automated control.
• Experience working with cloud or SaaS systems, including using their application, identity or audit data to investigate suspicious activity.
• Clear written communication: findings and recommendations that another team can act on, supported by evidence.
• Ability to build relationships and mentor others on technical topics, including security.

⭐ Desirable Experience

• Experience using AI agents in a SOC or other incident response workflows.
• Understanding of agent security risks, including the confused deputy problem and the lethal trifecta.
• You can facilitate a conversation rather than dictate it.
• 3+ years of software development experience and 1+ year of security-specific experience.
• Experience with security tools such as SAST, DAST, RASP, dependency checkers and SIEM.
• 1 year of AWS experience, including IAM and least-privilege architectures.

🎁 Benefits

• Equity
• 401k
• Health, Dental, and Vision insurance
• Spending accounts
• Life & Disability
• Paid parental leave
• Flexible paid time off
• Enhanced employee assistance program
• Employee wellness stipend
• Professional development stipend

🛂 Visa & Eligibility

ClickUp is an Equal Opportunity Employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.