Security Response Engineer

< See all openings ClickUp is on a mission to make the world more productive. We're saving thousands of individuals one day a week with the fastest growing productivity app of 2020. We're the breakout momentum leader in every G2 category we're in and ready to take off!

ClickUp was an entirely product-led growth company for our first 2,000,000 users; spending $0 on marketing and growing from the viral nature of people sharing and using the platform. ClickUp is now the fastest growing productivity app at over 800,000+ teams and a $1 billion 🦄 valuation in under 3 years. Our team makes the world more productive, and finding exceptional people to solve challenging problems is a top priority as we execute on this vision.

We're looking for a Security Response Engineer for a brand-new, engineering-focused security team. We partner with and embed inside of existing product and infrastructure platform teams at ClickUp. The Security Response Engineer will be one of the early technical hires focused on a Detection and Response Team (DART) initiative. DART would cover Security Engineering Tooling and Product Security Incident Response Team (PSIRT). You will build, design, and operate tools and processes for security monitoring and triage, incident response, and threat intelligence and detection.

You will work to build a culture of security enablement. Your focus on our infrastructure and product engineers will allow them to build and ship secure products based on Angular, Node.js, and PostgresSQL, all hosted in AWS.

You'll be a strategic partner working directly with various engineering teams across customer support, products and infrastructure, DevOps, security, legal, and business leaders. We're scaling quickly, and are looking for Security Response Engineers who aren't afraid of this challenge!

Perform some or all of the following, depending on skill-set:

• - Design and build tools to help with all stages in security prevention, detection, and response; across the full SDLC from code and test, through to deploy and operate.
• - Design and build tooling and capabilities for identifying, detecting, investigating, and responding to security events; continuous process improvement and practises to help with scaling and security.
• - Be the Incident Commander for security critical incidents and threats; coordinating cross-functional teams including technology, business, and legal stakeholders.
• - Design and build security policies and runbooks / playbooks; build capabilities to automate or assist with their execution.
• - Threat hunting; including product and infrastructure suggestions of ways to make attacks noisy and detectable.
• - Monitor, analyze, and triage production security events and, as needed, provide in-depth incident analysis.
• - Build relationships with other engineers, product managers, data engineers, operators, and security team members to enable shipping a secure product.
• - Communicate with technical and non-technical stakeholders in a clear and concise manner.
• - Participate in incident response on-call rotations.

• - 4+ years of experience in technology.
• - 2+ years experience with incident response.
• - An ability to identify and provide a basic assessment of security threats.
• - Cloud and SaaS experience.
• - Excellent communication skills with an ability to communicate technical concepts clearly and effectively including during times of crisis.
• - Ability to mentor others on technical topics, including security.

• - Past experience with pushing technical initiatives; team, project, or indirect management of technology.
• - 2+ years of software development experience.
• - Can facilitate a conversation rather than dictate it.
• - Experience with tabletop exercises or other trainings across business areas to ensure operational readiness.
• - Experience with Angular, Node.js, and PostgresSQL; or similar technologies.
• - 1 year of AWS experience; Elastic Beanstalk, CloudFormation, Security Hub, Inspector, Cloud Trail, Detective.
• - Experience with security tools; SAST, DAST, RASP, dependency checkers, SIEM.
• - If you are a software engineer or technical project or product manager who is only starting on learning security, please do apply!

ClickUp was founded on a culture of hard work, consistent growth, and a desire to break norms. We’re a values-driven company and hire based on ambition, merit, and a willingness to do what it takes to succeed. We don’t care where you’re from, what you look like, or who you’re in a relationship with—we hire the best people for the job, and create an environment that supports employees on their journey to do the most exciting work of their lives! ClickUp is an Equal Opportunity Employer, and qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.

Apply Now