Senior Offensive Security Engineer II

Requirements

• 10 years experience in application security, software development, or incident response
• Previous involvement in red teaming, adversary emulation, or penetration testing
• Experience working with at least one programming language (Java, C#, Python etc)
• Experience with secure development practices, public cloud, and network security
• Familiarity with security monitoring tools and investigation tools such as Splunk and Kibana
• Ability to communicate information about security and risk to a diverse audience

What You'll Be Doing

• Guide development teams in secure development and protective measures to deter abuse or attacks
• Provide security-focused recommendations based on threat intelligence, other real-world security events, and vulnerability assessments
• Build secure application design standards that allow low-friction adoption by product teams
• Lead security-focused architecture reviews and threat modeling in newly built features and existing product microservices infrastructure
• Continuously improve HubSpot's application security program by educating developers, creating secure defaults, and increasing automated testing
• Lead red team exercises to find weaknesses in HubSpot’s services, tools, and infrastructure
• Maintain knowledge of the latest vulnerabilities, exploits, and the evolving threat landscape and distil that knowledge to other groups within HubSpot
• Manage programs for bug bounty and internal and external penetration testing, ensuring vulnerabilities are identified and mitigated
• Act as an escalation point for security incidents that require the specialized knowledge of this team
• Drive projects and improvements that improve HubSpot’s Security and Privacy controls within the Product Organization and beyond

Perks and Benefits

We know the confidence gap and imposter syndrome can get in the way of meeting spectacular candidates, so please don’t hesitate to apply — we’d love to hear from you.

If you need accommodations or assistance due to a disability, please reach out to us using this form. This information will be treated as confidential and used only for the purpose of determining an appropriate accommodation for the interview process.