Principal Security Engineer

doing architecture review and targeted manual code review for complex SaaS features, with a track record of driving remediation requirements through to implementation with enough technical credibility to influence design decisions at the engineering leadership level.

mentoring engineers into threat modeling ownership and attacker-mindset review design; demonstrated track record of establishing security requirements as design-phase gates and sustaining engagement with engineering teams to drive implementation. Sufficient depth in SAST, SCA, secrets, and IaC scanning in modern CI/CD pipelines to credibly influence toolchain direction, resolve standards decisions that span teams, and shape secure coding standards without primary operational ownership; cloud security fundamentals sufficient to tie application controls to the infrastructure they run on. Fluent in one or more modern languages (Python, Java, TypeScript/JavaScript, Go, or equivalent); comfortable reading production codebases to surface issues tooling misses and writing or extending automation others can maintain. Expertise communicating risk and security requirements (written and verbal) clearly across audiences from engineering ICs through executive leadership; recognized as a trusted technical voice by partner teams. Ability to build trusted relationships across engineering, product, and security organizations; earns influence through technical credibility and sustained engagement. Legally eligible to work in the U.S. on an ongoing basis. Nice to Have: GitLab CI/CD experience, including security policy pipeline configuration and scanning job integration.

building AI-assisted security tooling or LLM-integrated review workflows that scale security review coverage. Penetration testing depth including exploit writing or vulnerability chaining to validate exploitability and prove real-world impact. Public-facing security contributions: conference speaking, CVE credits, published research, or industry community recognition that reflects the technical authority expected at principal level. Current US Perks & Benefits: Employer subsidized medical/vision and dental coverage for full-time employees 401k Match to help you save for your future (50% of your contribution up to the first 6% of your eligible pay) Monthly stipend to support your work and productivity Flexible Time Away Program, plus Sick Time Off US employees are automatically covered under Smartsheet-sponsored life insurance, short-term, and long-term disability plans US employees receive 12 paid holidays per year Up to 24 weeks of Parental Leave Personal paid Volunteer Day to support our community Opportunities for professional growth and development including access to Udemy online courses Company Funded Perks, including a counseling membership, local retail discounts, and your own personal Smartsheet account Teleworking options from any registered location in the U.S. (role specific) Smartsheet provides a competitive base salary range for roles that may be hired in different geographic areas we are licensed to operate our business from. Actual compensation is determined by several factors including, but not limited to, level of professional, educational experience, skills, and specific candidate location. In addition, this role will be eligible for a market competitive incentive opportunity. US Base Salary Pay Range $205,000 — $257,500 USD Get to Know Us: At Smartsheet, your ideas are heard, your potential is supported, and your contributions have real impact. You’ll have the freedom to explore, push boundaries, and grow beyond your role. We welcome diverse perspectives and nontraditional paths—because we know that impact comes from individuals who care deeply and challenge thoughtfully. When you’re doing work that stretches you, excites you, and connects you to something bigger, that’s magic at work. Let’s build what’s next, together. Equal Opportunity Employer: Smartsheet is an Equal Opportunity (EEO) employer committed to fostering an inclusive environment with the best employees. It is our policy to provide equal employment opportunities to all qualified applicants in accordance with applicable laws in the US, UK, Australia, Germany, Costa Rica, Japan, Bulgaria, India, and Singapore. All qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information. If there are preparations we can make to help ensure you have a comfortable and positive interview experience, please let us know. #LI-Remote