Senior Security Engineer, Infrastructure Security

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $160k - $210k / year

⏰ Full Time

🟠 Senior

👷 Infrastructure Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

ClickUp

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2017

☁️ SaaS

⚡ Productivity

🏢 Enterprise

💰 $400M Series C - ClickUp on 2021-10

SaaS • Productivity • Enterprise

ClickUp is a cloud-based SaaS work management and productivity platform that consolidates projects, docs, chat, time tracking, automations and AI-driven "Super Agents" into a single workspace. It helps teams and enterprises streamline workflows, replace fragmented software stacks, and boost productivity with integrations, customizable agents/workflows, and enterprise-grade security and compliance.

📋 Description

• Review infrastructure proposals and designs from engineering and non-engineering teams. • Write security proposals and review resulting changes. • Translate security requirements and agent findings into guidance for less-technical partners. • Build, evaluate and maintain agents for reviews, triage and investigations. • Help operate sandboxed, observable infrastructure for security agents. • Lead cloud and infrastructure alerts and incidents through resolution and root cause. • Collaborate with AppSec and incident response on cross-functional incidents. • Advance least-privilege and just-in-time access for people, CI and services across the cloud organization. • Deliver secure building blocks that teams adopt by default. • Harden container, serverless and virtual machine workloads, network perimeter and CI/CD pipelines. • Add automated checks to prevent recurring security issues. • Move vulnerability, access and attack-surface reviews to continuous monitoring and generate infrastructure-control audit evidence.

🎯 Requirements

• 5+ years in security engineering, cloud infrastructure or SRE, with at least 2 years securing AWS at organization scale. • At least a year of agentic development experience, including building agent skills and tools, maintaining development harnesses, and managing configuration, permissions, integrations, evaluations and cost controls. • Ability to secure agents against prompt injection, over-privileged tools and unaudited actions; explain the confused deputy problem and lethal trifecta; validate agent output against evidence and determine where human review is required. • Deep AWS IAM experience, including IAM Identity Center or equivalent SSO, SCPs, permission boundaries, resource and key policies, cross-account trust, and policy simulation. • Production Kubernetes security on EKS or similar, including RBAC, workload identity, network policy, admission control and container runtime hardening. • AWS networking security experience covering VPC design, endpoints and endpoint policies, network and DNS firewalls, egress control and WAF. • Fluency with infrastructure as code such as Terraform, including reusable patterns, multi-environment rollouts and security-impact plan review. • Experience with CNAPP, SIEM or runtime security tooling and cloud detection sources such as CloudTrail, GuardDuty and Access Analyzer. • Experience investigating cloud and infrastructure security events using cloud audit, Kubernetes, identity and network logs. • Track record of architecture reviews, design proposals, secure design guidance, mentoring through reviews and driving adopted changes. • Python, Go or TypeScript for security automation. • Clear written and verbal communication, including explaining technical risk to non-technical partners. • Desirable: AI agents in SOC or incident response workflows; sandboxed runtimes such as gVisor, Firecracker or Kata; offensive security or cloud/Kubernetes red-team experience; OPA or Rego; automated SOC 2 evidence collection.

🏖️ Benefits

• Equity • 401k • Health, Dental, and Vision insurance • Spending accounts • Life & Disability • Paid parental leave • Flexible paid time off • Enhanced employee assistance program • Employee wellness stipend • Professional development stipend

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume