Senior DFIR Engineer — AI-Powered Incident Response (Remote)

Devconnectplatform; United States; Remote; USD 160,000 - 210,000; Full time

Job summary

ClickUp is seeking a Senior Security Engineer focused on DFIR to investigate threats affecting the ClickUp platform and internal systems. You will lead investigations, uncover threat indicators, and ensure remediation with owning teams, while building AI-assisted tooling for response and audits.

The role requires translating findings into practical software changes and working closely with engineering, product, and security teams to implement enduring protections.

Qualifications

• Experience investigating security threats or platform abuse by analyzing logs and evidence.
• Ability to translate security findings into practical software design changes, responses or automated controls.
• Experience with cloud or SaaS systems and using their data to investigate suspicious activity.

Responsibilities

• Lead DFIR investigations and root-cause analysis for ClickUp platform and internal systems.
• Identify and respond to platform abuse; develop actionable threat intelligence.
• Build AI-assisted workflows for incident response and ongoing audits; automate repetitive tasks.

Skills

Automation tooling

AI-assisted development

Threat investigation

Cloud security

Written communication

Education

Bachelor's degree in CS or related field

Tools

SAST

DAST

RASP

SIEM

AWS

Job description

ClickUp is seeking a Senior Security Engineer focused on DFIR to investigate threats affecting the ClickUp platform and internal systems. You will lead investigations, uncover threat indicators, and ensure remediation with owning teams, while building AI-assisted tooling for response and audits.

The role requires translating findings into practical software changes and working closely with engineering, product, and security teams to implement enduring protections.