Senior Security Engineer

ClickUp; United States; On-site; USD 100,000 - 130,000; Full time

Job summary

A growing tech company is seeking a Security Engineer, AppSec to enhance application security while working closely with various engineering teams. This role focuses on designing security features, conducting testing, and building security capabilities on AWS while mentoring peers. Candidates should have substantial experience with Angular, Node.js, PostgreSQL, and a solid understanding of security risks. This is an opportunity to join a rapidly growing security team and help foster a strong security culture.

Qualifications

• Several years of experience in technology or software engineering.
• Expertise in Angular, Node.js, and PostgreSQL, or similar technologies.
• Understanding common security challenges.
• Experience working in cloud and SaaS environments.

Responsibilities

• Design and implement security features for the ClickUp platform.
• Conduct threat modeling and security testing.
• Develop tools for prevention and detection.
• Create and enhance security automation.

Skills

Secure design solutions

Security risk assessment

Mentorship

Threat modeling

Security tooling familiarity

Tools

AWS

SAST

DAST

PostgreSQL

Angular

Node.js

Job description

ClickUp is a breakout leader across every G2 category we participate in and is positioned for rapid growth. Our platform is designed to serve everyone, from families to Fortune 500 enterprises.

We are hiring a Security Engineer, AppSec to join a newly formed, engineering-driven security team. This team partners closely with and embeds within existing engineering groups at ClickUp. Our security organization focuses on developing and sharing technology such as defensive security capabilities, secure infrastructure and operational tooling, incident response tools and processes, as well as security standards and guardrails.

In this role, you will help foster a culture centered on security enablement. By working closely with product engineers, you will support the development and release of secure applications built with Angular, Node.js, and PostgreSQL, hosted on AWS.

You will act as a strategic partner to multiple engineering teams, contributing to the design, development, and implementation of secure solutions. As we continue to scale, we are seeking Security Engineers who are excited to take on this challenge.

The Role:

Perform some or all of the following, based on experience and skill set:

• Design and implement security features and protective measures that safeguard the full ClickUp platform.
• Conduct threat modeling, security testing, and implementation reviews; evaluate requirements and architectural designs.
• Develop tools that support prevention, detection, and response efforts across the entire SDLC—from code and testing through deployment and operations.
• Integrate with engineering and product teams, serving as a “security player-coach.”
• Create and enhance security automation within the ClickUp platform; build secure-by-default infrastructure and application patterns.
• Monitor and assess production security events and provide detailed incident analysis when required.
• Collaborate with engineers, product managers, data engineers, operators, and fellow security team members to help deliver a secure product.

Qualifications:

• Several years of experience in technology or software engineering.
• Experience with Angular, Node.js, and PostgreSQL, or comparable technologies.
• Ability to recognize and provide initial assessments of security risks.
• Solid understanding of common security challenges and the ability to recommend secure design solutions.
• Experience working in cloud and SaaS environments.
• Ability to mentor team members on technical subjects, including security topics.

Preferred

• Experience leading technical initiatives, including team, project, or indirect technology leadership.
• Skilled at facilitating collaborative discussions rather than directing them.
• 5+ years of software development experience, including at least 1 year focused on security.
• Familiarity with security tooling such as SAST, DAST, RASP, dependency scanning tools, and SIEM platforms.
• At least 2 years of experience with AWS, including IAM and least-privilege design principles.

If you don’t meet every listed qualification but are enthusiastic about the opportunity, we still encourage you to apply. We value ambition, determination, and a genuine interest in improving how people work. If ClickUp feels like the right fit for you, we welcome your application.At ClickUp, we evaluate every candidate based on the impact they can make. We hire exceptional people and support each individual in building their boldest career.

Equal Opportunity Employer

ClickUp is an Equal Opportunity Employer. Qualified applicants will be considered without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.

Privacy Notice

ClickUp collects and processes personal data in accordance with applicable data protection laws.

We are currently unable to sponsor or assume sponsorship for employment visas for roles outside of engineering and product. Sponsorship for engineering and product roles is not guaranteed and depends on the business needs of the specific role. Please contact the recruiter with any questions.

ClickUp Talent Acquisition will only contact candidates using an @clickup.com email address or through our official careers portal at clickup.com. We will never ask for fees, payments, or sensitive personal information. Please ignore offers received through other channels and report them to [e-mail].