Senior Security Engineer, DFIR
Core
Investigate threats and platform abuse affecting the ClickUp platform and internal systems, collect and analyze evidence, and lead investigations to root cause and remediation.
Role type
Senior IC security engineer (DFIR & platform abuse)
Builds
AI-assisted and agentic workflows for incident response, digital forensics, and ongoing audits
Domain
SaaS / Cloud security
Deliverable
production ML models
Required skills
Digital forensics and incident response, platform abuse investigation, log analysis, threat indicator identification, security automation, cloud/SaaS investigation, software development, AI-assisted development, agentic workflows, security tooling (SAST/DAST/RASP/SIEM), AWS IAM
Preferred skills
SOC incident response workflows, agent security risks (confused deputy, lethal trifecta), facilitation
Technologies
SAST, DAST, RASP, dependency checkers, SIEM, AWS IAM
Responsibilities
Investigate threats affecting the ClickUp platform and internal systems, collect and analyze relevant evidence, establish what happened and its impact, identify and respond to platform abuse, develop actionable threat intelligence, build and improve AI-assisted and agentic workflows for incident response, design and deploy security controls, work with engineering teams to implement software changes based on findings, mentor others on technical security topics
Seniority
Senior, hands-on IC
