Security Engineer II (Remote Eligible)

Smartsheet Inc; United States; Remote; USD 120,000 - 158,000; Full time

Job summary

An innovative tech company is seeking a seasoned Application Security Professional to enhance its security posture. This role involves identifying vulnerabilities, designing security controls, and collaborating with engineering teams to ensure secure software development. You'll leverage your expertise in security engineering and coding to automate security tasks and improve incident response capabilities. Join a forward-thinking organization that values cybersecurity as a core element of its culture, where your contributions will make a significant impact on protecting customer data and enhancing product security.

Benefits

100% employer-paid health premiums

401k Match

Monthly stipend for productivity

12 paid holidays per year

Up to 24 weeks of Parental Leave

Personal paid Volunteer Day

Access to Udemy online courses

Teleworking options

Qualifications

• 4+ years of hands-on experience in security engineering.
• Strong understanding of web application and mobile security.

Responsibilities

• Identify and analyze security vulnerabilities across products.
• Collaborate with engineering teams to ensure secure software development.

Skills

Security Engineering

Threat Modeling

Penetration Testing

Problem Solving

Secure Coding

Incident Response

Collaboration

Education

Bachelor's degree in Computer Science

Relevant Certifications (CISSP, OSCP)

Tools

SIEM Solutions (Splunk, MS Sentinel)

Python

PowerShell

Job description

Smartsheet is a tech company with a human story to tell. We’re here to empower teams to manage projects, automate workflows, and rapidly build new secure solutions, using simple no-code tools. We’re revolutionaries – so for us changing the way the world works is all in a day’s work.

Cyber Security is an integral part of Smartsheet’s corporate culture. At Smartsheet, we believe that it is the responsibility of each and every employee to safeguard information, protect it from unauthorized access, and ensure regulatory compliance. Cyber Security has a significant effect on privacy, consumer confidence, external reputation, and it is a priority on everyone’s agenda.

Smartsheet is looking for a seasoned Application Security Professional to join our Active Defense and Response Security team. In this critical role, you will be responsible for building solutions that help Smartsheet security in detection engineering, identifying telemetry gaps and bridging those gaps by collaborating with various stakeholders within Smartsheet. You will perform the role of a strategic thinker and have the operational gravitas to be part of Dev SecOps function to orchestrate world-class detection and response program.

You will report to our Sr. Manager, Engineering located in our Bellevue office, or you may work remotely from anywhere in the US where Smartsheet is a registered employer.

In this role, you will:

• Identify and analyze security vulnerabilities across Smartsheet’s products by leveraging techniques such as code reviews, penetration testing, threat modeling, and automated scans.
• Design, implement, and maintain security controls, processes, and services that strengthen product security and protect customer data.
• Triage, investigate, and remediate security issues reported through internal testing, bug bounty programs, or external sources, ensuring timely mitigation and clear communication to all stakeholders.
• Collaborate with engineering teams as a trusted security advisor, providing guidance on architectural decisions, reviewing designs for secure access control, and advocating for best practices in secure software development.
• Conduct in-depth security assessments, including security architecture reviews, threat modeling, and both automated and manual code reviews, to proactively identify potential weaknesses.
• Develop and refine security automation solutions to improve detection of application vulnerabilities, accelerate remediation, and continuously raise the bar for product security.
• Support incident response and forensic efforts, working cross-functionally to resolve issues, implement fixes, and design out similar vulnerabilities in the future.
• Develop and implement security automation to streamline detection, investigation, and response workflows, reducing manual effort and improving operational efficiency.
• Leverage SOAR and scripting technologies (e.g., Python, PowerShell, APIs) to automate repetitive security tasks, including alert triage, threat intelligence enrichment, and remediation actions.
• Design and optimize security automation playbooks to enhance incident response capabilities, ensuring rapid containment and mitigation of threats.
• Implement effective detection and response program by utilizing industry standard NIST / MITRE attack frameworks
• Serve as technical lead responsible for specific areas of computer security incident response activities to include intrusion detection monitoring, scanning, cyber threat reporting, and development/implementation of vulnerability mitigation strategies.
• Represent Smartsheet at information security and cyber security communities globally.

As an ideal candidate, you will have:

• Bachelor’s degree in Computer Science, Computer Engineering, or a related field, or equivalent practical experience.
• 4+ years of hands-on experience in security engineering (e.g., security design review, threat modeling, security assessments, privacy engineering).
• Advanced familiarity with fundamental security disciplines, such as web application security, mobile security, network security, or applied cryptography.
• Understanding of modern security concerns associated with large language models (LLMs), including potential attack vectors, data privacy considerations, and AI-specific threat mitigation.
• Proficiency in coding with at least one modern programming language (e.g., Node.js, Python, Go, Java, C++, Rust), with a track record of successful secure code delivery.
• Strong problem-solving and debugging skills, with the ability to identify and mitigate security threats throughout the software development lifecycle.
• Demonstrated experience collaborating with engineering and product teams, delivering clear guidance on secure coding, architecture, and access control to support confident product decisions.
• Proven leadership or mentorship experience, guiding more junior engineers or cross-functional stakeholders on security best practices and strategies.
• Ability to handle multiple competing priorities in a fast-paced environment
• Relevant certifications such as CISSP, SANS GCIH, SANS GXPN, SANS GIAC, SANS GREM etc.
• OSCP (Offensive Security Certified Professional) is a Plus
• Excellent understanding of Cyber Security Operations, Incident Response processes and telemetry engineering
• Experience with SIEM solutions like Splunk, MS Sentinel, Google Chronicle is a plus
• Expert Python Scripting, Perl, Shell scripting and SecDevOps/automation and or orchestration
• HSA, 100% employer-paid premiums, or Buy-up medical/vision and dental coverage options for full-time employees
• 401k Match to help you save for your future (50% of your contribution up to the first 6% of your eligible pay)
• Monthly stipend to support your work and productivity
• US employees are automatically covered under Smartsheet-sponsored life insurance, short-term, and long-term disability plans
• US employees receive 12 paid holidays per year
• Up to 24 weeks of Parental Leave
• Personal paid Volunteer Day to support our community
• Opportunities for professional growth and development including access to Udemy online courses
• Company Funded Perks, including a counseling membership, local retail discounts, and your own personal Smartsheet account
• Teleworking options from any registered location in the U.S. (role specific)

Smartsheet provides a competitive base salary range for roles that may be hired in different geographic areas we are licensed to operate our business from. Actual compensation is determined by several factors including, but not limited to, level of professional, educational experience, skills, and specific candidate location. In addition, this role will be eligible for a market competitive incentive opportunity.

US Base Salary Pay Range

$120,000 - $157,500 USD

Get to Know Us:

At Smartsheet, we’ve created a place where everyone is welcome — people from all over the world, all backgrounds, all ages, all colors, and all beliefs working side by side. Here, everyone can make a difference and empower others to do the same. You’re encouraged to apply even if your experience doesn’t precisely match our job description—if your career path has been nontraditional, that will set you apart. At Smartsheet, we empower everyone, everywhere to change the way the world works—join us!

Equal Opportunity Employer:

Smartsheet is an Equal Opportunity (EEO) employer committed to fostering an inclusive environment with the best employees. It is our policy to provide equal employment opportunities to all qualified applicants in accordance with applicable laws in the US, UK, Australia, Germany, Costa Rica, Japan, Bulgaria, and India. All qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information.

If there are preparations we can make to help ensure you have a comfortable and positive interview experience, please let us know.

Create a Job Alert

Interested in building your career at Smartsheet? Get future opportunities sent straight to your email.

Apply for this job

*

indicates a required field

First Name *

Last Name *

Preferred First Name *

Email *

Phone *

Location (City) *

Resume/CV *

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

Do you know anyone who works at Smartsheet? *

If yes, please include name(s) and the nature of the relationship(s). If no, please type no.

How did you hear about us? * Select...

In our pursuit of AI-driven advancements, how would you rate your overall familiarity with artificial intelligence (AI) concepts and tools? * Select...

Voluntary EEOC Demographics

At Smartsheet, we strive to build an inclusive environment that encourages, supports, and celebrates the diverse voices of our team members. Individuals seeking employment at Smartsheet are considered without regards to race, ethnicity, color, age, sex, religion, national origin, ancestry, pregnancy, sexual orientation, gender, gender identity, gender expression, genetic information, physical or mental disability, registered domestic partner status, caregiver status, marital status, veteran or military status, citizenship status, or any other legally protected category in the US, UK, and Australia.

Below is a set of voluntary demographic questions. If you choose to complete them, your responses will be used in aggregate to help us identify areas for improvement in our programs. Your responses, or your choice to not respond, will not be considered in the hiring process. Any information that you provide will be recorded and maintained confidentially.

For definitions of any of the following terms or to read more about your rights, please visit the EEOC website here .

Select...

I identify as transgender: * Select...

I identify my race / ethnicity as (select all that apply): * Select...