5 days ago
USA (city not specified)Senior
Base Salary
$160k - $210k/yr
Responsibilities
- Review infrastructure architecture and proposals, write security designs, and translate security requirements into actionable guidance.
- Build, evaluate, and maintain agentic security tooling and the sandboxed infrastructure supporting it.
- Lead cloud and infrastructure alerts and incidents through investigation, resolution, and root-cause analysis.
- Implement least-privilege and just-in-time access for people, CI, and services across cloud and production tooling.
- Harden container, serverless, virtual machine, network perimeter, and CI/CD environments with automated security checks.
- Move vulnerability, access, and attack-surface reviews to continuous monitoring that produces infrastructure-control evidence.
Requirements
- 5+ years of experience in security engineering, cloud infrastructure, or SRE, including at least 2 years securing AWS at organization scale.
- At least 1 year of agentic development experience, including agent tools, development harnesses, integrations, evaluations, permissions, cost controls, and agent security.
- Deep AWS IAM experience covering IAM Identity Center or equivalent SSO, SCPs, permission boundaries, resource and key policies, cross-account trust, and policy simulation.
- Production Kubernetes security experience on EKS or similar, including RBAC, workload identity, network policy, admission control, and container runtime hardening.
- Experience with AWS networking security, including VPCs, endpoints, endpoint policies, network and DNS firewalls, egress controls, and WAF.
- Fluency with infrastructure as code such as Terraform, including reusable patterns, multi-environment rollouts, and security-focused plan review.
- Experience with CNAPP, SIEM, runtime security tooling, CloudTrail, GuardDuty, Access Analyzer, and cloud or infrastructure security investigations.
- Track record of architecture reviews, security design proposals, mentoring through reviews, and guiding teams toward secure implementations.
- Programming ability in Python, Go, or TypeScript and strong written and verbal communication with technical and non-technical partners.
- Preferred experience includes AI agents in SOC or incident-response workflows, gVisor, Firecracker, Kata, cloud or Kubernetes offensive security, OPA, Rego, and automated SOC 2 evidence collection.
Benefits
- Sponsorship for this engineering role may be available based on the business needs for the specific role at that time, but is not guaranteed.
Tech Stack
Categories
About ClickUp
ClickUp builds an all-in-one work management platform for teams, combining tasks, docs, chat, whiteboards, calendars, time tracking, and AI features in a single workspace. It sells SaaS subscriptions with a freemium tier to individuals, SMBs, and enterprises, and integrates with common productivity tools. Founded in 2017 and headquartered in San Diego, the privately held company reports millions of users across project management, collaboration, and knowledge workflows.