Smartsheet is hiring a
Security Engineer II

Summary

Join Smartsheet's team as a motivated and detail-oriented Security Engineer to ensure customer data and the Smartsheet platform/service is protected and secured. In this role, you will support development teams with the implementation of Smartsheet's security best practices, ensuring that our applications and infrastructure are secure from the ground up.

Requirements

• 3+ years of total experience in the field of cyber security and particularly in security engineering
• Extensive experience in delivering security solutions across multiple environments including on-prem and cloud infrastructure - AWS experience is a plus
• Experience conducting security reviews and threat modeling on infrastructure software and services
• Strong analytical and problem solving skills
• Experience with network security concepts and capabilities including firewalls
• Experience deploying and/or utilizing security tooling such as Endpoint Detection and Response (EDR), Virtual Private Networks (VPN), Vulnerability scanning tools, Cloud Security Posture Management (CSPM), Security Information and Event Management (SIEM)
• Experience with NIST frameworks is a plus (800-53, NCF)
• Basic understanding of DevOps tools and practices (e.g., Git, Docker)
• Knowledge of cloud platforms (e.g., AWS, GCP) and their security features
• Experience with Infrastructure-as-code and policy-as-code is a plus
• Experience with hardened image builds and deployment is a plus
• Strong problem-solving skills with attention to detail and an eagerness to learn and adapt to new technologies and challenges
• Relevant certifications such as CompTIA Security+, AWS Certified Security – Specialty, or similar

Responsibilities

• Assist in integrating security tools and practices into team CI/CD pipelines to identify vulnerabilities early in the development lifecycle
• Develop and maintain scripts to automate security tasks such as scanning, monitoring, and patch management
• Implement security alerting, provide support to Security Operations to respond to potential threats and vulnerabilities, and participate in rotational on-call support
• Work with microservice DevOps, IT support, and compliance teams to ensure secure coding practices and configurations are followed, vulnerabilities are addressed, and security controls are implemented
• Help manage and secure cloud environments (e.g., AWS, GCP) by implementing best practices and security controls
• Maintain up-to-date documentation of security processes, tools, and configurations
• Stay informed about the latest security trends, vulnerabilities, and tools to continuously improve the security posture of the organization

Benefits

• HSA
• 100% employer-paid premiums
• Buy-up medical/vision and dental coverage options for full-time employees
• Stock - Restricted Stock Units (RSUs) for eligible roles
• Lucrative Employee Stock Purchase Program (15% discount)
• 401k Match to help you save for your future (50% of your contribution up to the first 6% of your eligible pay)
• Monthly stipend to support your work and productivity
• Flexible Time Away Program, plus Incidental Sick Leave
• US employees are automatically covered under Smartsheet-sponsored life insurance, short-term, and long-term disability plans
• US employees receive 12 paid holidays per year
• Up to 24 weeks of Parental Leave
• Personal paid Volunteer Day to support our community
• Opportunities for professional growth and development including access to Udemy online courses
• Company Funded Perks, including a counseling membership, local retail discounts, and your own personal Smartsheet account
• Teleworking options from any registered location in the U.S. (role specific)