Principal AI Security Architect

Smartsheet; Bellevue (WA); On-site; USD 205,000 - 258,000; Full time

Benefits offered by this job

Medical, vision and dental coverage

401k match

Monthly stipend for productivity

Flexible time away and sick time

Life/ disability insurance

12 paid holidays

Parental leave (up to 24 weeks)

Udemy courses access

Volunteer day

Company perks program

Teleworking from any US location

Job summary

Smartsheet is seeking a Principal Security Engineer to own high-leverage application security work, leading threat modeling and product security reviews across a modern SaaS platform used by millions. This senior IC role reports to the Manager, Application Security and can be based in Bellevue, WA, or remote anywhere in the US where Smartsheet is registered.

You will define AI security methodology, set security requirements during design, and scale security review coverage across engineering

Qualifications

• 10+ years in application security with leadership in product security or AppSec engineering.
• Own threat modeling as a systematic practice (STRIDE, data-flow).
• Hands-on experience securing AI-integrated applications and familiarity with OWASP LLM Top 10 and AI attack classes.
• Experience doing architecture reviews and targeted manual code review for complex SaaS features.
• Mentor engineers in threat modeling and risk-based design, championing design-phase gates.
• Depth in SAST, SCA, secrets management, and IaC scanning in CI/CD pipelines.

Responsibilities

• Lead Threat Modeling and Product Security Reviews: own upstream capability; derive abuse cases and drive requirements into designs.
• Define AI Security Methodology and drive coverage across product and AI integrations.
• Shape AppSec technical direction and SDLC controls across CI/CD tooling and security standards.
• Elevate team capability and influence across engineering, product, and leadership.

Skills

Threat modeling

AppSec leadership

AI security

SAST/SCA/IaC

Architecture review

Mentoring engineers

Programming languages

Risk communication

Tools

GitLab CI/CD

LLM tooling

Job description

Smartsheet is seeking a Principal Security Engineer to own high-leverage application security work, leading threat modeling and product security reviews across a modern SaaS platform used by millions. This senior IC role reports to the Manager, Application Security and can be based in Bellevue, WA, or remote anywhere in the US where Smartsheet is registered.

You will define AI security methodology, set security requirements during design, and scale security review coverage across engineering