Principal Security Engineer

🕒 6 days ago

☕ Washington – Remote

☕ Washington – Remote

💵 $205k - $257.5k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Smartsheet

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2005

💼 Consulting

🏥 Healthcare

📣 Marketing

Consulting • Healthcare • Marketing

Smartsheet is a platform designed to manage projects, automate workflows, and build solutions at scale. It offers a wide range of features including automation, team collaboration, dashboards and reporting, and integrations, allowing businesses to streamline their operations. The platform caters to diverse use cases such as project management, IT portfolio management, marketing management, and more, serving various industries including government, finance, and healthcare. Smartsheet also emphasizes security and data protection, ensuring users' data privacy. Additionally, it offers professional services like consulting, training, and implementation support to maximize the platform's capabilities.

📋 Description

• Lead threat modeling and product security reviews across Smartsheet’s SaaS platform • Build threat models from architecture and data-flow artifacts, derive abuse cases and test scenarios, and drive security requirements into designs • Define the product security review service, including service model, triage criteria, and enforcement posture • Execute reviews for high-risk features and document findings and remediation timelines • Define, assess, monitor, and mitigate AI security risks across products, engineering, and third-party AI integrations • Own and evolve AI-assisted security review capabilities and shape toolchain coverage • Set technical direction for AppSec SDLC controls, secure coding guidelines, CI/CD pipeline security, SAST, SCA, secrets, and IaC scanning • Build runbooks, standards, and documentation for consistent application security practices • Mentor AppSec team members and influence product and engineering leadership • Frame security risk to guide architecture decisions and organizational investment

🎯 Requirements

• 10+ years in application security with sustained technical leadership in product security or AppSec engineering, including ownership of threat modeling programs and security review services at scale • Ability to own systematic threat modeling using STRIDE, data-flow, and architecture diagrams • Hands-on experience securing AI-integrated applications, including LLM workflows, agentic systems, model APIs, and MCP-based integrations • Fluency in the OWASP LLM Top 10 and current AI attack classes • Experience with architecture review and targeted manual code review for complex SaaS features • Experience driving remediation requirements through implementation • Experience mentoring engineers in threat modeling and attacker-mindset review design • Depth in SAST, SCA, secrets, and IaC scanning in modern CI/CD pipelines • Cloud security fundamentals • Fluency in one or more of Python, Java, TypeScript/JavaScript, Go, or equivalent • Ability to read production code and write or extend maintainable automation • Clear written and verbal communication of risk and security requirements across technical and executive audiences • Ability to build trusted relationships across engineering, product, and security organizations • Legally eligible to work in the U.S. on an ongoing basis • Nice to have: GitLab CI/CD experience, AI-assisted security tooling, penetration testing, exploit writing or vulnerability chaining, conference speaking, CVE credits, published research, or industry recognition

🏖️ Benefits

• Employer subsidized medical/vision and dental coverage for full-time employees • 401k Match to help you save for your future (50% of your contribution up to the first 6% of your eligible pay) • Monthly stipend to support your work and productivity • Flexible Time Away Program, plus Sick Time Off • Smartsheet-sponsored life insurance, short-term, and long-term disability plans • 12 paid holidays per year • Up to 24 weeks of Parental Leave • Personal paid Volunteer Day • Opportunities for professional growth and development including access to Udemy online courses • Company Funded Perks, including a counseling membership, local retail discounts, and your own personal Smartsheet account • Teleworking options from any registered location in the U.S. (role specific) • Market competitive incentive opportunity

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume