Security Engineer

Cyber Security is an integral part of Smartsheet’s corporate culture. At Smartsheet, we believe that it is the responsibility of each and every employee to safeguard information, protect it from unauthorized access, and ensure regulatory compliance. Cyber Security has a significant effect on privacy, consumer trust, external reputation, and it is a priority on every team's agenda.

We’re looking for top-notch security professionals, folks who share our passion to ensure customer data, Smartsheet platform/service is protected and the organization is secured. 

In 2005, Smartsheet was founded on the idea that teams and millions of people worldwide deserve a better way to deliver their very best work. Today, we deliver a leading cloud-based platform for work execution, empowering organizations to plan, capture, track, automate, and report on work at scale, resulting in more efficient processes and better business outcomes.

You will report to our Senior Manager, Security Engineering located in our Bellevue, WA office, or you may work remotely from anywhere in the US where Smartsheet is a registered employer.

Our team focuses on distributed decision making that rewards ownership, transparency, and collaboration. Learn more about our platform here: Smartsheet Overview Video

You Will:

• As an individual contributor and as part of a team develop, build, test, maintain, as well as monitor for effectiveness  security controls, toolings,  and implementations
• Be diligent in your pursuit of constantly finding ways to improve the security posture of the Smartsheet environment 
• Improve  infrastructure security maturity at scale through designing, and implementing, and building solutions
• Participate in the development of security plans for the company’s enterprise environment
• Work closely with compliance teams in the delivery of evidence showing security control effectiveness for the various auditing activities
• Provide support to the Security Operations Team in responding to security incidents and follow-on remediation efforts
• Work alongside product engineering teams and Corporate IT engineers to ensure security controls and protective measures are implemented
• Be flexible to support multiple projects and tasks 
• Participate in rotational on-call support
• Understand and adhere to legal, regulatory and compliance requirements while working on sensitive security incidents
• Be passionate in the pursuit of securing Smartsheet customer data and critical assets

You Have:

• 5+ years of total experience in the field of cyber security and particularly in security engineering
• Extensive experience in delivering security solutions across multiple environments including on-prem and cloud infrastructure - AWS experience is a plus
• Experience conducting security reviews and threat modeling on infrastructure software and services
• Strong analytical and problem solving skills
• Experience with network security concepts and capabilities to include firewalls
• Experience deploying and/or utilizing security tooling such as Endpoint Detection and Response (EDR), Virtual Private Networks (VPN), Vulnerability scanning tools, Cloud Security Posture Management (CSPM), Security Information and Event Management (SIEM)
• Experience with NIST frameworks is a plus (800-53, NCF)
• Relevant security certification(s) such as CISSP, GCSA, CCSP, etc, is a plus
• DevOps, DevSecOps experience is a plus
• Experience with Infrastructure-as-code and policy-as-code is a plus
• In order to comply with federal government requirements, this job is only available to U.S. citizens, U.S. lawful permanent residents, U.S. nationals, and certain temporary residents, refugees, and asylees

Perks & Benefits:

• HSA, 100% employer-paid premiums, or buy-up medical/vision and dental coverage options for full-time employees
• Equity - Restricted Stock Units (RSUs) with all offers
• Lucrative Employee Stock Purchase Program (15% discount)
• 401k Match to help you save for your future (50% of your contribution up to the first 6% of your eligible pay)
• Monthly stipend to support your work and productivity
• Flexible Time Away Program, plus Incidental Sick Leave
• Up to 24 weeks of Parental Leave
• Personal paid Volunteer Day to support our community
• Opportunities for professional growth and development including access to LinkedIn Learning online courses
• Company Funded Perks, including a counseling membership, primary care membership, local retail discounts, and your own personal Smartsheet account
• Teleworking options from any registered locati