Security Engineer, Smartsheet
$120-157.5k
+ Market competitive incentive opportunity
More information about location
Dynamic workspace platform for collaboration
Be an early applicant
Dynamic workspace platform for collaboration
1001+ employees
Be an early applicant
$120-157.5k
+ Market competitive incentive opportunity
More information about location
1001+ employees
Company mission
to empower anyone to drive meaningful change — for themselves, their businesses, and the world.
Role
Who you are
- Bachelor’s degree in Computer Science, Computer Engineering, or a related field, or equivalent practical experience
- 4+ years of hands-on experience in security engineering (e.g., security design review, threat modeling, security assessments, privacy engineering)
- Advanced familiarity with fundamental security disciplines, such as web application security, mobile security, network security, or applied cryptography
- Understanding of modern security concerns associated with large language models (LLMs), including potential attack vectors, data privacy considerations, and AI-specific threat mitigation
- Proficiency in coding with at least one modern programming language (e.g., Node.js, Python, Go, Java, C++, Rust), with a track record of successful secure code delivery
- Strong problem-solving and debugging skills, with the ability to identify and mitigate security threats throughout the software development lifecycle
- Demonstrated experience collaborating with engineering and product teams, delivering clear guidance on secure coding, architecture, and access control to support confident product decisions
- Proven leadership or mentorship experience, guiding more junior engineers or cross-functional stakeholders on security best practices and strategies
- Ability to handle multiple competing priorities in a fast-paced environment
- Relevant certifications such as CISSP, SANS GCIH, SANS GXPN, SANS GIAC, SANS GREM etc
- OSCP (Offensive Security Certified Professional) is a Plus
- Excellent understanding of Cyber Security Operations, Incident Response processes and telemetry engineering
- Experience with SIEM solutions like Splunk, MS Sentinel, Google Chronicle is a plus
- Expert Python Scripting, Perl, Shell scripting and SecDevOps/automation and or orchestration
What the job involves
- Smartsheet is looking for a seasoned Application Security Professional to join our Active Defense and Response Security team
- In this critical role, you will be responsible for building solutions that help Smartsheet security in detection engineering, identifying telemetry gaps and bridging those gaps by collaborating with various stakeholders within Smartsheet
- You will perform the role of a strategic thinker and have the operational gravitas to be part of Dev SecOps function to orchestrate world-class detection and response program
- You will report to our Senior Manager, Engineering located in our Bellevue office
- Identify and analyze security vulnerabilities across Smartsheet’s products by leveraging techniques such as code reviews, penetration testing, threat modeling, and automated scans
- Design, implement, and maintain security controls, processes, and services that strengthen product security and protect customer data
- Triage, investigate, and remediate security issues reported through internal testing, bug bounty programs, or external sources, ensuring timely mitigation and clear communication to all stakeholders
- Collaborate with engineering teams as a trusted security advisor, providing guidance on architectural decisions, reviewing designs for secure access control, and advocating for best practices in secure software development
- Conduct in-depth security assessments, including security architecture reviews, threat modeling, and both automated and manual code reviews, to proactively identify potential weaknesses
- Develop and refine security automation solutions to improve detection of application vulnerabilities, accelerate remediation, and continuously raise the bar for product security
- Support incident response and forensic efforts, working cross-functionally to resolve issues, implement fixes, and design out similar vulnerabilities in the future
- Develop and implement security automation to streamline detection, investigation, and response workflows, reducing manual effort and improving operational efficiency
- Leverage SOAR and scripting technologies (e.g., Python, PowerShell, APIs) to automate repetitive security tasks, including alert triage, threat intelligence enrichment, and remediation actions
- Design and optimize security automation playbooks to enhance incident response capabilities, ensuring rapid containment and mitigation of threats
- Implement effective detection and response program by utilizing industry standard NIST / MITRE attack frameworks
- Serve as technical lead responsible for specific areas of computer security incident response activities to include intrusion detection monitoring, scanning, cyber threat reporting, and development/implementation of vulnerability mitigation strategies
- Represent Smartsheet at information security and cyber security communities globally
Our take
With teams increasingly moving to remote work across many industries, companies have been reaching for tools to keep operations smooth and communications open. Founded in 2005, Smartsheet is a cloud-based work management platform helping a vast range of companies, from small businesses to large enterprises, plan, track, and report on work.
Like other team collaboration software companies Lucid and Atlassian, Smartsheet saw strong growth between 2020-2022, achieving almost 40% year on year revenue increases through 2022. If the company can continue this success, it stands to make real gains in a global team collaboration market expected to be worth about $20 billion by 2028.
Smartsheet has embedded itself across various industries, with deep integrations with applications from the likes of Salesforce, Atlassian, Google, and Microsoft, leading to it being the first work management sector Unicorn to reach $1 billion in recurring annual revenue in 2024. Whilst remaining broad in application, it is also expanding and upgrading its product offerings; this may prove crucial in further distinguishing itself from well-backed startups like Monday.com and Asana as they begin jostling for market space.
Steph
Company Specialist at Welcome to the Jungle
Insights
7% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
May 2017
$58.8m
SERIES F
May 2014
$35m
SERIES E
Total funding: $126.3m
Company benefits
- Lucrative Employee Stock Purchase Program (15% discount)
- 401k Match to help you save for your future (50% of your contribution up to the first 6% of your eligible pay)
- Monthly stipend to support your work and productivity
- Flexible Time Away Program, plus Incidental Sick Leave
- Up to 24 weeks of Parental Leave
- Personal paid Volunteer Day to support our community
- Opportunities for professional growth and development including access to LinkedIn Learning online courses
- Company Funded Perks, including a counseling membership, primary care membership, local retail discounts, and your own personal Smartsheet account
- Teleworking options from any registered location (role specific)
- HSA, 100% employer-paid premiums, or Buy-up medical/vision and dental coverage options for full-time employees
- Equity - Restricted Stock Units (RSUs) with all offers
- US employees are automatically covered under Smartsheet-sponsored life insurance, short-term, and long-term disability plans
- US employees receive 12 paid holidays per year
Company HQ
West Bellevue, Bellevue, WA
Leadership
Mark Mader
(President & CEO)Having studied at Dartmouth, Mark spent 2 years as a Greenwich Associates Research Associate before 10 years at Onyx Software. They then founded Smartsheet in 2005 as CEO.
Brent Frei
(Board Member)Brent worked at Motorola and Microsoft for 4 years before founding Onyx Software in 1994 and Smartsheet in 2005. They have been a Board Member since, alongside working as CEO of TerraClear.
Share this job
View 33 more jobs at Smartsheet