Principal Software Engineer, Security
Core
Designing and implementing automated detection systems, threat intelligence, and incident response solutions to secure HubSpot's platform and customer data.
Role type
Principal Software Engineer (Security)
Builds
Automated detection systems, scalable response frameworks, and corporate security logging infrastructure.
Domain
Cybersecurity, Threat Detection, Incident Response
Deliverable
production ML models | product features | infrastructure
Required skills
Detection engineering, threat intelligence, incident response, automated detection system design, large-scale security logging infrastructure management, endpoint and network detection (EDR/SASE), telemetry correlation, IOC management, STIX/TAXII standards, NIST 800-61 and SANS frameworks, Splunk, CrowdStrike Falcon
Preferred skills
GCIH, GCFA, CISSP, vendor-specific EDR certifications
Technologies
Splunk, CrowdStrike Falcon, SIEM, STIX, TAXII
Responsibilities
Drive development of automated detection systems and prioritize mitigations based on threat coverage gaps; partner with engineering teams for purple team exercises and risk mitigation; guide architectural decisions for security logging infrastructure; contribute code to security automations and review designs for detection reliability; provide technical mentorship to engineers; act as key point of contact for threat intelligence and incident response; support incident investigations and anticipate bad actor behaviors; correlate diverse telemetry to detect post-entry behavior; produce actionable intelligence by filtering and correlating IOCs; evaluate customer impact on threats and maintain industry relationships for intelligence sharing.
Seniority
Principal, hands-on IC with strategic influence
