Senior Security Engineer, Infrastructure Security

The role

You will secure the cloud, compute, network, and access layers including AWS, Kubernetes, and identity systems. You will build agentic security tooling, lead incident response, and implement least privilege access.

What you will do

• Act as an initial reviewer on infrastructure proposals and designs.
• Write security proposals and review changes.
• Translate security requirements into guidance for less-technical partners.
• Build, evaluate and maintain agents for reviews, triage and investigations.
• Run sandboxed, observable infrastructure for agents.
• Lead cloud and infrastructure alerts and incidents through to resolution.
• Move people, CI and services toward least privilege and just-in-time access.
• Harden container, serverless and virtual machine workloads, network perimeter and CI/CD pipelines.
• Move vulnerability, access and attack-surface reviews to continuous monitoring.

Required qualifications

• 5+ years in security engineering, cloud infrastructure or SRE.
• At least 2 years securing AWS at organization scale.
• At least a year of agentic development experience.
• Deep AWS IAM experience including IAM Identity Center, SCPs, permission boundaries, resource and key policies, and cross-account trust.
• Production Kubernetes security on EKS or similar, covering RBAC, workload identity, network policy, admission control and container runtime hardening.
• AWS networking for security including VPC design, endpoints, network and DNS firewalls, egress control, and WAF.
• Fluency with infrastructure as code such as Terraform.
• Experience with CNAPP, SIEM or runtime security tooling and cloud detection sources like CloudTrail, GuardDuty and Access Analyzer.
• Experience investigating cloud and infrastructure security events.
• Track record of reviewing architecture and writing design proposals.
• Python, Go or TypeScript for security automation.
• Clear written and verbal communication.

Nice to have

• Experience using AI agents in a SOC or other incident response workflows.
• Sandboxed runtime experience with gVisor, Firecracker or Kata.
• Offensive security or red-team experience in cloud and Kubernetes environments.
• Policy engines such as OPA or Rego.
• Supporting audits like SOC 2 with automated evidence collection.

About the company

ClickUp is an AI-native company building a converged AI workspace unifying tasks, docs, chat, calendar, and enterprise search. The company expects every team member to leverage AI daily.