HHiring Reality
← Smartsheet

Principal Security Engineer

Smartsheet
Location
Bellevue, WA, USA
Posted
26 days ago
Department
Engineering - Developers
What they actually want (must-haves)
  • 10+ years in application security with a track record of sustained technical leadership in product security or AppSec engineering
  • Ability to own threat modeling as a systematic practice, producing actionable test scenarios and abuse cases
  • Hands-on experience securing AI-integrated applications with fluency in the OWASP LLM Top 10 and current AI attack classes
  • Experience doing architecture review and targeted manual code review for complex SaaS features
  • Experience mentoring engineers into threat modeling ownership and establishing security requirements as design-phase gates
  • Sufficient depth in SAST, SCA, secrets, and IaC scanning in modern CI/CD pipelines
Nice to have
  • GitLab CI/CD experience
  • Experience building AI-assisted security tooling or LLM-integrated review workflows
  • Penetration testing depth including exploit writing or vulnerability chaining
  • Public-facing security contributions such as conference speaking or published research
What the job really is

The Principal Security Engineer at Smartsheet will lead application security efforts, focusing on threat modeling and product security reviews for a modern SaaS platform. This role involves defining AI security methodologies, shaping application security practices, and mentoring team members while engaging with product and engineering leadership to drive security requirements. The position requires a deep understanding of application security, particularly in the context of AI-integrated applications, and the ability to influence architectural decisions.

Benefits
  • Employer subsidized medical/vision and dental coverage for full-time employees
  • 401k Match
  • Monthly stipend to support work and productivity
  • Flexible Time Away Program, plus Sick Time Off
  • Life insurance, short-term, and long-term disability plans
  • 12 paid holidays per year
Things to weigh
  • No specific mention of the tech stack beyond modern SaaS and AI integrations
  • Role is remote-friendly but requires legal eligibility to work in the U.S.
  • No salary listed for specific locations, only a range provided
Job score3.8/5
Benefits5/5
Freshness4/5
Career value5/5
Role clarity5/5
Pay transparency0/5

Applying to Smartsheet?

See how your résumé matches this role — and tailor it from what actually gets interviews.