[All remote jobs](https://jobicy.com/jobs.md)[![ClickUp logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/cd5be0ef-221.jpg)](https://jobicy.com/company/clickup.md)[ClickUp](https://jobicy.com/company/clickup.md) # Senior Security Engineer, Infrastructure Security AI Summary ClickUp is seeking a senior infrastructure security engineer to secure AWS, Kubernetes, identity, networking, CI/CD, and cloud workloads. The role combines hands-on detection and incident investigation with architecture reviews, least-privilege design, and automated security controls. A major focus is building and operating secure AI-agent tooling for reviews, triage, and investigations. The engineer will work asynchronously with technical and non-technical partners to turn findings into durable, adoptable security improvements.[Apply for this job](#job-application)[View company](https://jobicy.com/company/clickup.md)ShareRemote from[USA](https://jobicy.com/job-region/usa.md)SalaryUSD 160k–210k / yrDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceSeniorPublished9 Nov 2026Apply before9 Dec 2026Listing views28Application actions2Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. Opportunity details ## About this role. At [ClickUp](https://jobicy.com/company/clickup.md), we’re building the future of work: the first truly converged AI workspace unifying tasks, docs, chat, calendar, and enterprise search, all supercharged by context-driven AI. We are an AI-native company. Every team member is expected to leverage AI daily, and we evaluate AI fluency as part of our hiring process. Join us and help redefine what’s possible. 🚀 Security at ClickUp Security at ClickUp is engineering-focused. We partner with teams across the company to protect our platform, our internal systems and our customers through secure design, defensive controls, detection and response. We build tooling and automation, including AI-powered workflows, to turn what we learn into lasting improvements. About the team Infrastructure Security at ClickUp secures the cloud, compute, network and access layers underneath ClickUp: a multi-account AWS organization, a large Kubernetes fleet, infrastructure managed as code and the identity systems engineers use to reach production. We are a small team that works agentic first, using AI agents we build and maintain ourselves to multiply what a team our size can cover. You will support this mission by thinking like a developer, breaking down a problem that we face, testing a method to approach it with automation, and implementing solutions that yield compounding value. Your skills to uncover threat indicators will be the foundation of this work. The role * Architecture, proposals and reviews. Act as an initial reviewer on infrastructure proposals and designs from engineering and non-engineering teams such as business systems and go-to-market. Write our own security proposals and review the changes that follow. Translate security requirements and agent findings into clear guidance for less-technical partners, and bring their needs back into our designs. * Agentic security tooling and agent infrastructure. Build, evaluate and maintain the agents behind our reviews, triage and investigations, and help run the sandboxed, observable infrastructure they operate on. * Detection, investigation and response. Lead cloud and infrastructure alerts and incidents through to resolution and root cause, working alongside AppSec and incident response on incidents that span both. * Identity, access and least privilege. Move people, CI and services toward least privilege and just-in-time access across our cloud organization and the tooling engineers use to reach production. Deliver fixes as secure building blocks that teams adopt by default. * Compute, network and pipeline security. Harden our container, serverless and virtual machine workloads, our network perimeter and our CI/CD pipelines, and add checks so each class of issue is caught automatically next time. * Continuous review and audit evidence. Move vulnerability, access and attack-surface reviews from point-in-time checks to continuous monitoring that also produces evidence for our infrastructure controls. Qualifications * 5+ years in security engineering, cloud infrastructure or SRE, with at least 2 years securing AWS at organization scale. * At least a year of agentic development experience: building agent skills and tools for real engineering work, and developing and maintaining the development harness they run in, from configuration and permissions to integrations, evaluations and cost controls. You can secure agents against prompt injection, over-privileged tools and unaudited actions, and explain how agents fall into the confused deputy problem and the lethal trifecta. You validate agent output against evidence and decide where human review is required. * Deep AWS IAM experience: IAM Identity Center or an equivalent SSO model, SCPs, permission boundaries, resource and key policies, cross-account trust, and the ability to prove a policy’s effect with simulation rather than inference. * Production Kubernetes security on EKS or similar, covering RBAC, workload identity, network policy, admission control and container runtime hardening. * AWS networking for security: VPC design, endpoints and endpoint policies, network and DNS firewalls, egress control, and WAF. * Fluency with infrastructure as code such as Terraform, including reusable patterns, multi-environment rollouts and reading plans for security impact. * Experience with CNAPP, SIEM or runtime security tooling and the cloud detection sources around it, such as CloudTrail, GuardDuty and Access Analyzer. * Experience investigating cloud and infrastructure security events: correlating cloud audit, Kubernetes, identity and network logs to establish what happened, its blast radius and its root cause. * A track record of reviewing architecture and writing design proposals, guiding teams toward secure designs through conversation rather than mandate, mentoring others through reviews, and turning a review into a change another team is glad to make. * Python, Go or TypeScript for security automation. * Clear written and verbal communication, including explaining technical risk to non-technical partners. Most of our work with other teams is asynchronous, so much of the job is a well-evidenced finding, proposal or design note that another team can act on without a meeting. Desirable * Experience using AI agents in a SOC or other incident response workflows. * Sandboxed runtime experience with gVisor, Firecracker or Kata. * Offensive security or red-team experience in cloud and Kubernetes environments. * Policy engines such as OPA or Rego. * Supporting audits like SOC 2 with automated evidence collection. Our stack AWS, Kubernetes, infrastructure as code, CI/CD with federated identity, an enterprise identity provider, observability and cloud security platforms, and AI agent tooling. Equal Opportunity Employer ClickUp is an Equal Opportunity Employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin. Privacy Notice ClickUp collects and processes personal data in accordance with applicable data protection laws. You can find further details by viewing our [Global Candidate Privacy Notice.](https://clickup.com/careers-terms/candidate-privacy-notice) If you are a Philippine Job Applicant, please also see our [Philippine Data Privacy Notice](https://t333.s.clickup-attachments-stg.com/t333/d9a53ce2-6d2c-48cd-84b1-ed4e525f9613/Philippine%20Data%20Privacy%20Notice_2024.pdf?view=open) for further details. Visa Sponsorship Please note we are unable to sponsor or take over sponsorship of an employment visa for roles outside of engineering and product at this time. Sponsorship for engineering and product roles is not guaranteed, but is instead based on the business needs for that specific role at that time. Please reach out to the recruiter with any questions. Fraud Alert ClickUp Talent Acquisition will only initiate contact via an @[clickup.com](http://clickup.com) email or through our official careers portal on [clickup.com](http://clickup.com). We will never request fees, payments, or sensitive personal information. Please disregard any offers received outside these channels and report them to support@clickup.com. AI Processing Notice ClickUp may use artificial intelligence and machine learning technologies to help review and screen candidates’ employment applications against role-related criteria. These tools support, but do not replace, human decision‑making. If you have questions or need an accommodation in the recruitment process, please contact us at AskPeople@ClickUp.com. Show more [Apply now >](https://jobicy.com/jobs/160313-senior-security-engineer-infrastructure-security.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 5/5IndependentCollaborative AI insightThis is a highly senior role requiring deep production expertise across AWS IAM, Kubernetes, cloud networking, detection engineering, infrastructure as code, and incident response. It also requires practical experience securing and operating agentic AI systems, plus the judgment to influence designs across teams. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job median (per year)Market rate$185,000US market range (per year)$175k–$230k0$253.00k AI insightThe employer discloses a base salary range of $160,000–$210,000 USD per year, with a midpoint of $185,000. For a senior US infrastructure security engineering position with AWS, Kubernetes, and AI-agent security responsibilities, the estimated annual market range is $175,000–$230,000 USD. ## Core skills Skills and capabilities most closely associated with this opportunity. [AWS security](https://jobicy.com/jobs?search_keywords=AWS%20security.md)[AWS IAM](https://jobicy.com/jobs?search_keywords=AWS%20IAM.md)[Kubernetes security](https://jobicy.com/jobs?search_keywords=Kubernetes%20security.md)[EKS](https://jobicy.com/jobs?search_keywords=EKS.md)[Terraform](https://jobicy.com/jobs?search_keywords=Terraform.md)[Cloud security architecture](https://jobicy.com/jobs?search_keywords=Cloud%20security%20architecture.md)[Cloud incident response](https://jobicy.com/jobs?search_keywords=Cloud%20incident%20response.md)[SIEM](https://jobicy.com/jobs?search_keywords=SIEM.md)[CloudTrail](https://jobicy.com/jobs?search_keywords=CloudTrail.md)[GuardDuty](https://jobicy.com/jobs?search_keywords=GuardDuty.md)[Network security](https://jobicy.com/jobs?search_keywords=Network%20security.md)[CI/CD security](https://jobicy.com/jobs?search_keywords=CICD%20security.md)[Python](https://jobicy.com/jobs?search_keywords=Python.md)[AI agent security](https://jobicy.com/jobs?search_keywords=AI%20agent%20security.md)[Identity and access management](https://jobicy.com/jobs?search_keywords=Identity%20and%20access%20management.md) Sample interview questionsHow would you validate the effective permissions of an AWS IAM policy across accounts?I would evaluate identity, resource, SCP, permission-boundary, session, and key policies together, then use IAM policy simulation and controlled test principals to verify the effective result. I would document the tested actions, resources, conditions, and cross-account trust path rather than relying solely on policy reading. Describe how you would secure an AI agent that can investigate infrastructure alerts. I would apply least privilege to every tool, isolate execution in a sandboxed and observable environment, require scoped credentials, and log all tool calls and outputs. I would protect the workflow against prompt injection and confused-deputy paths, validate agent conclusions against source evidence, and require human approval for high-impact actions. What controls would you prioritize when hardening an EKS environment? I would prioritize workload identity, restrictive RBAC, network policies, admission controls, image and runtime security, secrets management, and audit logging. I would also establish secure node and cluster configuration baselines, continuously detect drift, and integrate findings into deployment checks. How would you investigate a suspected compromised cloud credential? I would first contain the credential by revoking or restricting it while preserving evidence, then correlate CloudTrail, identity-provider, Kubernetes, network, and workload logs. I would determine the affected permissions, actions performed, resources accessed, lateral movement opportunities, and root cause before implementing preventive controls. How do you make security architecture reviews constructive for engineering teams? I begin by understanding the delivery goal and constraints, then provide evidence-based risk analysis with practical alternatives and reusable secure patterns. I communicate the risk in the audience's context, agree on ownership and milestones, and ensure the review results in changes that can be adopted rather than a purely theoretical recommendation. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![1Password logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/09/WRILS-200909195848-296323.png) 1Password Nov 9 New ### [Security Intern, Threat Operations – Winter 2027](https://jobicy.com/jobs/160317-security-intern-threat-operations-winter-2027.md) 1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up… * ![Databricks logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/12/4e3f864ba9cf3c62d471e1c62414d098.jpg) Databricks Nov 9 New ### [Principal Security Field Engineer](https://jobicy.com/jobs/160312-principal-security-field-engineer-2.md) RDQ327R177 While candidates in the listed location(s) are encouraged for this role, candidates in other US locations will be considered. The Security Field Engineering team helps data teams solve the… * ![1Password logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/09/WRILS-200909195848-296323.png) 1Password Nov 9 New ### [Staff Security Engineer, Security Incident Response](https://jobicy.com/jobs/160301-staff-security-engineer-security-incident-response.md) 1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up… * ![ClickUp logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/cd5be0ef-221.jpg) ClickUp Nov 9 New ### [Senior Security Engineer, DFIR](https://jobicy.com/jobs/160300-senior-security-engineer-dfir.md) At ClickUp, we’re building the future of work: the first truly converged AI workspace unifying tasks, docs, chat, calendar, and enterprise search, all supercharged by context-driven AI. We are an… * ![HyperHug logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/04d564d3c979-221.webp) HyperHug Nov 9 New ### [Senior Unity Developer (Anti Cheat)](https://jobicy.com/jobs/160267-senior-unity-developer-anti-cheat.md) HyperHug is an international game development studio specializing in the shooter genre. Our main office is based in Cyprus, but our talented team works remotely from around the world. We’re… * ![Liftoff logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/c47aea9f-221.png) Liftoff Nov 9 New ### [Security Engineer, Offensive Security](https://jobicy.com/jobs/160030-security-engineer-offensive-security.md) Liftoff is a leading AI-powered performance marketing platform for the mobile app economy. Our end-to-end technology stack helps app marketers acquire and retain high-value users, while enabling publishers to maximize… * ![Instacart logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2023/03/fe39c2bc9bb5ebb0b5e24318b1f3b60d.jpeg) Instacart Nov 9 New ### [Detection Engineer II](https://jobicy.com/jobs/160025-detection-engineer-ii.md) We’re transforming the grocery industry At Instacart, we invite the world to share love through food because we believe everyone should have access to the food they love and more… * ![DeleteMe logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/c26c546a-221.png) DeleteMe Nov 9 New ### [Solutions Engineer, Cyber Security](https://jobicy.com/jobs/154932-solutions-engineer-cyber-security.md) About DeleteMe: DeleteMe is the leader in proactive privacy protection. We help security teams reduce their human attack surface by continuously monitoring and removing exposed personal data (PII) from the… * ![Caylent logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/9ed8d81b-221.jpg) Caylent Nov 8 New ### [Security Engineer](https://jobicy.com/jobs/159882-security-engineer-5.md) Caylent is an AI-first cloud services company that helps organizations turn ambitious ideas into meaningful business impact. As an AWS Premier Tier Services Partner and a charter member of Anthropic’s… * ![Databricks logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/12/4e3f864ba9cf3c62d471e1c62414d098.jpg) Databricks Nov 8 New ### [Staff Enterprise Security Engineer](https://jobicy.com/jobs/159859-staff-enterprise-security-engineer.md) RDQ227R1176 While candidates in the listed location(s) are encouraged for this role, candidates in other locations (US based) will be considered. Mission Databricks is hiring an L6 Staff Enterprise Security… [Browse all jobs](https://jobicy.com/jobs.md)