Senior Security Engineer, App Security

ClickUp is the world’s only all-in-one productivity platform that flexes to the way people want to work. It replaces all individual workplace productivity tools with a single, unified platform that includes project management, document collaboration, whiteboards, spreadsheets, and AI. With our headquarters based in San Diego and a rapidly expanding global presence, we are shaping the future of work. Join our team at ClickUp, one of the fastest-growing SaaS companies worldwide, and help millions of users be more productive - saving them at least one day every week. 🦄

We're looking for a Software Engineer, AppSec for an engineering-focused security team. We are not the prototypical security team: we partner with and embed inside of existing engineering teams at ClickUp.   The security team at ClickUp works to build and share technology including defensive security features and functionality, secure infrastructure and operational tools, security response tooling and processes, and security guidelines and guardrails. Our mission: to help the organization move swiftly and securely by giving them secure paved paths. When something slips through anyway, we do our best to prioritize only the vulnerabilities that are actually exploitable, and we recommended fixes that empathize with the realities of development here.   You will support this mission by thinking like a developer, recommending solutions they can readily adopt, and implementing our own for areas with heightened risk. Your focus on our product engineers will allow them to build and ship secure products based on Angular, Node.js, and PostgresSQL, all hosted in AWS.   You'll be a strategic partner working directly with various engineering teams helping to design, develop and guide teams to secure solutions. We're scaling quickly, and are looking for Security Engineers who aren't afraid of this challenge!   The Role: You'll perform some mix of the following depending on your skillset:

• Perform threat models, implementation reviews, and security testing; review requirements and designs. (This will be your bread and butter that informs the rest of our work.)
• Keep up with developments in an area of the stack so your recommendations follow existing patterns.
• Design, develop and build security features and defenses that protect the entire scope of the ClickUp platform.
• Design and build tools to help with all stages in security prevention, detection, and response; across the full SDLC from code and test, through to deploy and operate.
• Embed yourself into existing engineering and product teams, acting as a "security player-coach".
• Build security automation for and into the ClickUp platform; design and build secure-by-default infrastructure and applications.
• Monitor and analyze production security events and, as needed, provide in-depth incident analysis.
• Build relationships with other engineers, product managers, data engineers, operators, and security team members to enable shipping a secure product.

  Qualifications:

• Multiple years of experience in technology / software development.
• Experience with Angular, Node.js, and PostgresSQL; or similar technologies.
• An ability to identify and provide a basic assessment of security threats.
• An understanding of security problems, paired with an ability to suggest solutions to software design problems.
• Cloud and SaaS experience.
• Ability to mentor others on technical topics, including security.

  Desirable:

• Past experience with pushing technical initiatives; team, project, or indirect management of technology.
• Can facilitate a conversation rather than dictate it.
• 5+ years of software development experience and 1+ year of security-specific experience.
• Experience with security tools; SAST, DAST, RASP, dependency checkers, SIEM.
• 2 years of AWS experience; IAM and least-privilege architectures.

  If you are a software engineer who is only starting to learn security, please do apply!   #LI-REMOTE #LI-MAV

 

 

Unsure if you meet all the qualifications of this job description but are deeply excited about the role? We hire based on ambition, grit, and a passion for improving the way people work. If you think ClickUp is the company for you, we encourage you to apply!

ClickUp was founded on a culture of hard work, consistent growth, and a desire to break norms. We’re a values-driven company and hire based on ambition, merit, and a willingness to do what it takes to succeed. We don’t care where you’re from, what you look like, or who you’re in a relationship with—we hire the best people for the job, and create an environment that supports employees on their journey to do the most exciting work of their lives! ClickUp is an Equal Opportunity Employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.

ClickUp collects and processes personal data in accordance with applicable data protection laws.

• If you are a European Job Applicant, see our privacy policy for further details.
• If you are a Philippine Job Applicant, see our privacy policy and our Philippine Data Privacy Notice for further details.

Please note we are unable to sponsor or take over sponsorship of an employment visa for roles outside of engineering and product at this time. Sponsorship for engineering and product roles is not guaranteed, but is instead based on the business needs for that specific role at that time. Please reach out to the recruiter with any questions.