Principal Software Engineer, Security, Detection & Response

🕒 il y a 14 jours

🍂 Massachusetts – Distant

🍂 Massachusetts – Remote

💵 $266 200 - $425 900 / an

⏰ Temps Plein

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🦅 Parrain de Visa H1B

Cette entreprise a parrainé des visas H1B par le passé.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Recevoir des emails pour des emplois à distance

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

HubSpot

Site WebLinkedInTous les Emplois

1001 - 5000 employés

Fondée en 2006

🤝 B2B

☁️ SaaS

B2B • SaaS • Marketing

HubSpot est une plateforme client alimentée par l'IA qui combine des logiciels de marketing, de vente et de service client en une suite intégrée. Avec plus de 238 000 clients dans 135 pays, HubSpot propose des outils pour l'automatisation du marketing, la gestion des ventes, le service client, le marketing de contenu, les opérations et le commerce B2B. Avec des produits comme Marketing Hub, Sales Hub, Service Hub et Content Hub, HubSpot permet aux entreprises de générer des leads, de conclure des affaires et de fournir un excellent support client, tout en utilisant l'IA pour améliorer les opérations et les insights. La plateforme est conçue pour unifier les équipes et les données clients, soutenant à la fois les petites startups et les grandes entreprises dans leur parcours de croissance.

Description

• Building strong detection foundations and response frameworks to advance HubSpot’s security posture. • Driving the development of automated detection systems and prioritizing mitigations based on current threats and coverage gaps. • Partnering closely with engineering teams to supply data for purple team exercises and implement practical solutions that mitigate risks. • Guiding architectural decisions for our corporate security logging infrastructure and SIEM. • Contributing code to security automations, reviewing designs for detection reliability, and providing technical mentorship to engineers. • Acting as a key point of contact for threat intelligence and incident response expertise. • Supporting incident response efforts by aiding in investigations and understanding bad actor behaviors.

🎯 Exigences

• 10-15 years of experience in software development and information security, with a focus on detection engineering, threat intelligence, and incident response. • Proven experience in designing and implementing automated detection systems and managing large-scale security logging infrastructure (e.g., Splunk, SIEM). • Expert knowledge of endpoint and network detection (EDR/SASE), and hands-on experience with tools like CrowdStrike Falcon for investigation and response. • Deep understanding of incident response methodologies and frameworks such as NIST 800-61, SANS, and the ability to lead high-severity CritSits. • Demonstrated experience in correlating diverse telemetry (identity, cloud, network) to detect post-entry behavior and contain threats quickly. • Experience managing and ingesting Indicators of Compromise (IOCs) and mapping actor techniques to standards like STIX/TAXII. • Excellent communication skills, with the ability to articulate complex threat landscapes to both technical and non-technical audiences. • Relevant industry certifications (e.g., GCIH, GCFA, CISSP, or vendor-specific EDR certifications).

🏖️ Avantages

• Health insurance • 401(k) matching • Flexible work arrangements • Paid time off • Professional development opportunities • Bonuses • Stock options • Equipment allowances