{"id":3893962,"url":"https://alion.io/job/clickup-senior-security-engineer-dfir","title":"Senior Security Engineer, DFIR","company":{"id":5670,"name":"ClickUp","domain":"clickup.com","url":"https://alion.io/company/clickup","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":96,"open_postings":46,"ghost_share":0,"stale_share":0.174,"repost_share":0,"time_to_fill_p50_days":55,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":160000,"max":210000,"currency":"USD","period":"year","gross":null,"usd_annual":210000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"ClickUp","optional":false},{"name":"AWS","optional":true},{"name":"IAM","optional":true},{"name":"Least Privilege","optional":true},{"name":"Machine Learning","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-11-06T21:57:24Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-07T19:25:37Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"At ClickUp, we're building the future of work: the first truly converged AI workspace unifying tasks, docs, chat, calendar, and enterprise search, all supercharged by context-driven AI. We are an AI-native company. Every team member is expected to leverage AI daily, and we evaluate AI fluency as part of our hiring process. Join us and help redefine what's possible.\nSecurity at ClickUp\nSecurity at ClickUp is engineering-focused. We partner with teams across the company to protect our platform, our internal systems and our customers through secure design, defensive controls, detection and response. We build tooling and automation, including AI-powered workflows, to turn what we learn into lasting improvements.\nAbout the team\nApplication Security at ClickUp investigates threats, platform abuse and security incidents affecting our product and internal systems. We turn investigation findings into response tooling, automation and stronger product defenses, partnering with engineering and product teams to prevent repeat issues. This is an engineering-first team that uses AI tools and agentic workflows to improve how we investigate and respond.\nYou will support this mission by thinking like a developer, breaking down a problem that we face, testing a method to approach it with automation, and implementing solutions that yield compounding value. Your skills to uncover threat indicators will be the foundation of this work.\nThe role\nDigital forensics and incident response. Investigate threats affecting the ClickUp platform and internal systems, collect and analyze relevant evidence, and establish what happened and its impact. Lead investigations through findings, response and root cause, working with the owning teams to follow remediation through to completion.\n\nPlatform abuse investigations. Identify and respond to abuse of the ClickUp platform. Uncover threat indicators and recurring patterns, develop actionable threat intelligence, and use the findings to improve detection and prevent repeat abuse.\n\nAgentic security tooling. Build and improve AI-assisted and agentic workflows for incident response, digital forensics and ongoing audits. Automate repeatable investigation work, validate outputs against evidence, and keep human review and appropriate access controls around consequential actions.\n\nProduct defenses and security controls. Design, develop and deploy controls that protect our product and internal systems. Turn investigation findings into software changes, response tooling and automated checks that address the underlying issue rather than just the individual incident.\n\nEngineering partnership. Work directly with engineering, product, data and operations teams as a security player-coach. Explain observed threats with clear evidence, help teams design practical defenses, and mentor others so the improvements last beyond a single investigation.\n\nQualifications\nMultiple years of experience in technology or software development, including building and maintaining tooling or automation that solves operational problems.\n\nPractical experience using AI-assisted development or agentic workflows for engineering or security work, with an ability to validate their output and recognize when human review is needed.\n\nExperience investigating security threats or platform abuse: analyzing logs and other evidence, identifying threat indicators, and explaining findings and impact.\n\nAbility to translate a security finding into a practical software design change, response improvement or automated control.\n\nExperience working with cloud or SaaS systems, including using their application, identity or audit data to investigate suspicious activity.\n\nClear written communication: findings and recommendations that another team can act on, supported by evidence.\n\nAbility to build relationships and mentor others on technical topics, including security.\n\nDesirable\nExperience using AI agents in a SOC or other incident response workflows.\n\nUnderstanding of agent security risks, including the confused deputy problem and the lethal trifecta.\n\nYou can facilitate a conversation rather than dictate it.\n\n3+ years of software development experience and 1+ year of security-specific experience.\n\nExperience with security tools such as SAST, DAST, RASP, dependency checkers and SIEM.\n\n1 year of AWS experience, including IAM and least-privilege architectures.\n\nOur stack\nCloud and SaaS environments, software development and security automation, AI-assisted and agentic workflows, and security investigation tooling.\nIf you are a software engineer who is only starting to learn security, please do apply!\nEqual Opportunity Employer\nClickUp is an Equal Opportunity Employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.\nPrivacy Notice\nClickUp collects and processes personal data in accordance with applicable data protection laws. You can find further details by viewing our Global Candidate Privacy Notice.\nIf you are a Philippine Job Applicant, please also see our Philippine Data Privacy Notice for further details.\nVisa Sponsorship\nPlease note we are unable to sponsor or take over sponsorship of an employment visa for roles outside of engineering and product at this time. Sponsorship for engineering and product roles is not guaranteed, but is instead based on the business needs for that specific role at that time. Please reach out to the recruiter with any questions.\nFraud Alert\nClickUp Talent Acquisition will only initiate contact via an @clickup.com email or through our official careers portal on clickup.com. We will never request fees, payments, or sensitive personal information. Please disregard any offers received outside these channels and report them to .\nAI Processing Notice\nClickUp may use artificial intelligence and machine learning technologies to help review and screen candidates' employment applications against role-related criteria. These tools support, but do not replace, human decision-making. If you have questions or need an accommodation in the recruitment process, please contact us at .","description_format":"text","description_chars":6227,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Office & Productivity Software","AI Agents","Project & Work Management Software"],"lifecycle":[{"event":"open","at":"2026-11-06T22:31:31Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":55,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-11-07T05:47:08Z"},"pay":{"stated_usd_annual":210000,"is_top_pay":true},"html_url":"https://alion.io/job/clickup-senior-security-engineer-dfir","json_url":"https://alion.io/job/clickup-senior-security-engineer-dfir.json","meta":{"generated_at":"2026-11-07T21:32:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":34888,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5670},"rest":"https://alion.io/mcp/rest/get_company?id=5670"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fclickup-senior-security-engineer-dfir"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fclickup-senior-security-engineer-dfir"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fclickup-senior-security-engineer-dfir"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/clickup-senior-security-engineer-dfir\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fclickup-senior-security-engineer-dfir"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3893962}},{"tool":"search_jobs","arguments":{"company":"clickup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3893962},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}