Principal Software Engineer, Security

HubSpot; United States; On-site; USD 266,000 - 426,000; Full time

Benefits offered by this job

Equity plan

Job summary

HubSpot is seeking a Principal Software Engineer to shape and deliver secure, scalable identity and access solutions for our platform. You will influence technical direction, drive secure software design, and mentor engineers to uphold best practices in security across products.

You will partner with engineering, product, and compliance teams to ensure secure development, including AI initiatives, while maintaining HubSpot’s high standards for data protection and customer trust.

Qualifications

• 10+ years of experience in software development and information security, with a focus on identity, access, and applied cryptography.
• Proven experience designing identity infrastructure and foundational security services in a cloud-native environment.
• Expert knowledge of secure development, public cloud security, and network security.
• Deep understanding of Zero Trust principles, including identity-centric security and least-privilege access.
• Experience designing and leading large-scale migrations with minimal customer impact.
• Experience securing AI systems and familiarity with AI/ML workflows and deployments.
• Comfort with AI development tools to enhance productivity and code quality.
• Proven mentoring of security engineers and building security expertise across teams.
• Excellent communication skills for technical and non-technical audiences.
• Commitment to continuous learning and staying current with security trends.
• Knowledge of SOC 2, ISO 27001, NIST 800-53 and GDPR.
• Relevant certifications (e.g., CISSP, CEH, Azure/AWS security).

Responsibilities

• As Principal Software Engineer, lead the development of secure foundations and security-focused architectural decisions.
• Mentor engineers, review designs, and promote secure coding practices across projects.
• Collaborate with engineering, product, and legal/compliance to weave security into the SDLC.
• Contribute hands-on code and guide secure AI initiatives within the org.

Job description

HubSpot is looking for a talented Principal Software Engineer to shape and deliver secure, robust, and scalable identity and access solutions supporting our growing platform. In this pivotal org-impacting role, you will use your extensive hands‑on engineering experience to drive secure software design, influence the technical direction of your organization, and implement best‑in‑class security practices. You’ll tackle challenging problems and partner closely with cross‑functional peers, making a tangible impact on the safety and integrity of our products.

At HubSpot, security isn’t just a checkbox—it’s woven into everything we do. By building secure foundations and scalable systems, you’ll be enabling our teams and customers to grow better, together. If you’re motivated to strengthen security for millions of organizations at scale, you’ll find this opportunity exciting!

Responsibilities

As a Principal Software Engineer, you will play a leading role in building strong security foundations to advance Hubspot’s security posture. You will be a trusted technical leader within your organization, driving the development and improvement of secure software systems. You will partner closely with engineering and security teams to implement practical, hands‑on solutions that mitigate risks and strengthen our product offerings. Your deep technical knowledge will help guide architectural decisions and establish best practices across projects in your org. You’ll focus on translating organizational priorities into tangible, secure engineering outcomes. Day-to-day, you’ll contribute code, review designs, and provide technical mentorship to engineers—championing security in everything we do.

You’ll act as a key point of contact for security expertise within the org— ensuring that Hubspot’s products meet both internal guardrails and external customer’s trust and security needs. You will work closely with engineers, product managers, and legal/compliance partners to ensure security is woven into the software development lifecycle, and that organizational objectives remain tightly aligned with secure design and delivery. You will also help shape our approach to securing AI initiatives, sharing your knowledge and fostering technical capabilities for building secure, innovative AI systems.

The secure systems and practices you establish will have a real and lasting impact on upholding the security and integrity of the data entrusted to HubSpot by millions of customers. By proactively identifying and addressing security risks in our products and aligning HubSpot’s product and security strategies, you will directly contribute to a secure experience for every customer—enabling them to focus on running and growing their business with confidence.

Key Expectations

• 10+ years of experience in software development and information security, with a focus on identity, access, and applied cryptography.
• Proven experience in designing and implementing identity infrastructure and other foundational security services in a cloud‑native environment.
• Expert knowledge of secure development, public cloud security, and network security.
• Deep understanding and practical implementation experience with Zero Trust principles, including identity‑centric security, continuous verification, and least‑privilege access across distributed environments.
• Experience designing and leading the execution of large‑scale migrations, ensuring the safe, secure, and seamless transition of critical systems or data while minimizing customer impact.
• Demonstrated experience in - or a strong willingness to learn - securing artificial intelligence systems such as AI/ML workflows, training data, models, agents, and deployments, to mitigate emerging AI‑specific threats.
• Comfortable with leveraging and championing AI development tools (such as GitHub Copilot, Claude, ChatGPT) to enhance productivity and code quality
• Proven track record of mentoring and developing other security engineers, fostering technical growth and elevating security expertise across the org.
• Excellent communication skills, with the ability to articulate complex security concepts to both technical and non‑technical audiences.
• A passion for staying current with the latest security trends and a commitment to continuous learning.
• Strong understanding of security, privacy, and compliance standards such as SOC 2, ISO 27001, NIST 800‑53 and GDPR.
• Relevant industry certification (e.g., CISSP, CEH, Azure Cybersecurity Architect, AWS Speciality, etc.)

Pay & Benefits

The cash compensation below includes base salary, on‑target commission for employees in eligible roles, and annual bonus targets under HubSpot’s bonus plan for eligible roles. In addition to cash compensation, some roles are eligible to participate in HubSpot’s equity plan to receive restricted stock units (RSUs). Some roles may also be eligible for overtime pay. Individual compensation packages are tailored to your skills, experience, qualifications, and other job‑related reasons.

This resource will help guide how we recommend thinking about the range you see. Learn more about HubSpot’s compensation philosophy.

Benefits are also an important piece of your total compensation package. Explore the benefits and perks HubSpot offers to help employees grow better.

At HubSpot, fair compensation practices aren’t just about checking off the box for legal compliance. It’s about living out our value of transparency with our employees, candidates, and community.

Annual Cash Compensation Range

$266,200—$425,900 USD

Massachusetts Applicants: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Germany Applicants: (m/f/d) - link to HubSpot's Career Diversity page here.

India Applicants: link to HubSpot India's equal opportunity policy here.

About HubSpot

HubSpot (NYSE: HUBS) is an AI‑powered customer platform with all the software, integrations, and resources customers need to connect marketing, sales, and service. HubSpot’s connected platform enables businesses to grow faster by focusing on what matters most: customers.

At HubSpot, bold is our baseline. Our employees around the globe move fast, stay customer‑obsessed, and win together. Our culture is grounded in four commitments: Solve for the Customer, Be Bold, Learn Fast, Align, Adapt & Go!, and Deliver with HEART. These commitments shape how we work, lead, and grow.

We’re building a company where people can do their best work. We focus on brilliant work, not badge swipes. By combining clarity, ownership, and trust, we create space for big thinking and meaningful progress. And we know that when our employees grow, our customers do too.

Recognized globally for our award‑winning culture by Comparably, Glassdoor, Fortune, and more, HubSpot is headquartered in Cambridge, MA, with employees and offices around the world.

Explore More

• HubSpot Careers
• Life at HubSpot on Instagram

HubSpot may use AI to help screen or assess candidates, but all hiring decisions are always human. More information can be found here. By submitting your application, you agree that HubSpot may collect your personal data for recruiting, global organization planning, and related purposes. We may use CLEAR ID Verification during the hiring process to confirm your identity and help maintain a safe, secure, and trusted experience for all candidates. Refer to HubSpot’s Recruiting Privacy Notice for details on data processing and your rights.