Senior Security Engineer, App Security

ClickUp
Canada
$170K-$215K a year (estimated)
Full-time

ClickUp is the world's only all-in-one productivity platform that flexes to the way people want to work. It replaces all individual workplace productivity tools with a single, unified platform including project management, document collaboration, spreadsheets, chat, goals, and more.

On a mission to make the world more productive, ClickUp is headquartered in San Diego and scaling remotely and internationally.

As one of the fastest-growing SaaS companies in the world, ClickUp helps millions of users to be more productive and save at least one day every week.

We're looking for a Security Engineer, AppSec for an engineering-focused security team. We partner with and embed inside of existing engineering teams at ClickUp.

The security team at ClickUp works to build and share technology including defensive security features and functionality, secure infrastructure and operational tools, security response tooling and processes, and security guidelines and guardrails.

You will work to build a culture of security enablement. Your focus on our product engineers will allow them to build and ship secure products based on Angular, Node.

js, and PostgresSQL, all hosted in AWS. You'll be a strategic partner working directly with various engineering teams helping to design, develop and guide teams to secure solutions.

We're scaling quickly, and are looking for Security Engineers who aren't afraid of this challenge!

The Role :

Perform some or all of the following, depending on skill-set :

  • Design, develop and build security features and defenses that protect the entire scope of the ClickUp platform.
  • Perform threat models, implementation reviews, and security testing; review requirements and designs.
  • Design and build tools to help with all stages in security prevention, detection, and response; across the full SDLC from code and test, through to deploy and operate.
  • Embed yourself into existing engineering and product teams, acting as a "security player-coach".
  • Build security automation for and into the ClickUp platform; design and build secure-by-default infrastructure and applications.
  • Monitor and analyze production security events and, as needed, provide in-depth incident analysis.
  • Build relationships with other engineers, product managers, data engineers, operators, and security team members to enable shipping a secure product.

Qualifications :

  • Multiple years of experience in technology / software development.
  • Experience with Angular, Node.js, and PostgresSQL; or similar technologies.
  • An ability to identify and provide a basic assessment of security threats.
  • An understanding of security problems, paired with an ability to suggest solutions to software design problems.
  • Cloud and SaaS experience.
  • Ability to mentor others on technical topics, including security.

Desirable :

  • Past experience with pushing technical initiatives; team, project, or indirect management of technology.
  • Can facilitate a conversation rather than dictate it.
  • 5+ years of software development experience and 1+ year of security-specific experience.
  • Experience with security tools; SAST, DAST, RASP, dependency checkers, SIEM.
  • 2 years of AWS experience; IAM and least-privilege architectures.
  • If you are a software engineer who is only starting to learn security, please do apply!

LI-RS1 #LI-REMOTE

ClickUp was founded on a culture of hard work, consistent growth, and a desire to break norms. We’re a values-driven company and hire based on ambition, merit, and a willingness to do what it takes to succeed.

We don’t care where you’re from, what you look like, or who you’re in a relationship with we hire the best people for the job, and create an environment that supports employees on their journey to do the most exciting work of their lives! ClickUp is an Equal Opportunity Employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.

ClickUp collects and processes personal data in accordance with applicable data protection laws. If you are a European Job Applicant, see our for further details.

30+ days ago
Related jobs
Affirm, Inc.
Canada
Remote

The Senior Product Security Engineer candidate will have experience building and architecting software as part of a larger team. The Security team posture increases security and reduces risk while securely enabling access to information for those who need it!. The ideal candidate will work effective...

Clover Health
Canada

As a Senior Security Engineer, you will forge and nurture trusted relationships with internal technology teams (Software Engineering, SRE, DS/ML, Product) and external customers (e. We are deliberate and self-reflective about the engineering team and culture that we are building, seeking engineers t...

1Password
Canada
Remote

Provide technical leadership and mentorship to engineers, both within the team and across the security and engineering organizations. Own the delivery and success of infrastructure security projects that span engineering teams and departments. Partner with security and infrastructure engineers and l...

Great Canadian Gaming Corp.
Canada, Canada

Collaborate with security and technical teams to ensure security requirements and risks, including potential mitigations, are understood. Demonstrated knowledge of application security (SDLC). Mindwire is currently seeking a Security Solution Architect to work for our valued client. Conduct cyber ri...

Scribd
Remote US Canada
Remote

Engineering and Security experience, with 4+ years in a leadership role• Proven experience in developing an Infrastructure Security strategy, building Security teams in a SaaS environment, and implementing cybersecurity controls• Expertise with Infrastructure Security control Platforms, including de...

The Credit Pros
CA
Remote

Ensure that all business-critical applications are fully secured against vulnerabilities, regularly perform assessments, and address potential security gaps. The role covers end-to-end security, ensuring compliance with industry standards and safeguarding sensitive data across all aspects of our IT ...

Grammarly
Canada

To achieve our ambitious goals, we’re looking for a Security Engineer to join the Grammarly Product Security team. As a Security Engineer in Product Security, you will:. Partner with the product and engineering teams to integrate reproducible security practices into the product development lifecycle...

KPMG
Canada, Canada

Responsible for applying a security architecture lens to all cyber security services, ensuring that all systems, networks, and processes are designed and implemented with optimal security measures in place. Applicants must possess the ability to apply a security architecture perspective across all c...

Dropbox
Canada
Remote

Apply technical expertise to solve security challenges, define technical roadmaps and implement security controls. Applicants are encouraged to ask for more details of the rotations to which the applicant is applying. As a Security Engineer, you'll safeguard our digital ecosystem alongside a diverse...

Sterling Crane Canada
Remote, Canada
Remote

The Senior Manager, IT Infrastructure and Security - Global will play a critical role in ensuring the stability, security, and scalability of the infrastructure and security environment for the organization, while providing technical leadership, people management, and strategic guidance to a global ...