As a member of a small, elite and fast-moving Security Team - you will get your hands dirty and exercise your creativity in protecting our world class software platform.
We have built a large scale, highly automated infrastructure on top of the best hybrid cloud platforms across many providers. We push the traditional mediums of governance and compliance while protecting our customers and their data (policy zealots need not apply).

Description:

HubSpot’s Security Team owns the ideas, approach, and responses to keeping our customers and their data safe. You will put novel, automated strategies in place to protect our customers and scale with our explosive growth.

We use tools and creativity vs. process and policy to ensure our systems protect themselves from today’s and tomorrow’s threats. You will have to be very hands on and inventive as we continue to bake security best practices into our corporate systems and product.

You’ll be successful at HubSpot if you’re a highly enthusiastic security engineer. If you’re great at securing stuff at scale, we’re excited to use your skills. To hit the ground running, you need to be proficient in several of the following:

1. Deep knowledge of security monitoring, log aggregation, alert structures, and managing SIEM implementations
2. Specific familiarity with Splunk, machine learning, and large-volume log data management
3. Web application security: general web app protections and behaviors, WAF implementations, responding to behavioral anomalies, and proactively securing a large and dynamic application perimeter
4. Hands-on incident response experience: keen familiarity with IR processes, tools, and investigatory techniques (e.g., log review, forensic approaches, etc.).
5. Day-in/day-out experience with virtualization platforms, IaaS/PaaS providers, and SaaS security – we are all-cloud, all the time
6. Familiar with SAML, SSO solutions, and authentication & authorization solution best practices
7. Experience developing in Python, Perl, Java, or a similar language. Everywhere possible, we automate our security measures
8. Exposure to Puppet, Chef, and large-scale server automation
9. A general aptitude for solving problems. Above all, we value a Get [Stuff] Done attitude.

Educational and Experience Requirements:

1. BS or equivalent in an information technology related field (Computer Science/Engineering, Electrical Engineering, etc) or 4 years hands-on experience in the technical security field
2. Certifications including CEH, GPEN, OSCP, GWAPT, and similar are a plus

If you’re excited about pushing your current experience to its limits and rapidly expanding the kinds of security initiatives you’ve previously been involved with - we want to talk to you!

HubSpot helps millions of organizations grow better, and we’d love to grow better with you. Our business builds the software and systems that power the world’s small to medium-sized businesses. Our company culture builds connections, careers, and employee growth. How? By creating a workplace that values flexibility, autonomy, and transparency. If that sounds like something you’d like to be part of, we’d love to hear from you.

You can find out more about our company culture in the HubSpot Culture Code, which has more than 3M views, and learn about our commitment to creating a diverse and inclusive workplace, too. Thanks to the work of every HubSpotter globally who has helped build our remarkable culture, HubSpot has been named a top workplace by Glassdoor, Fortune, Entrepreneur, and more.

HubSpot was founded in 2006. We’re headquartered in Cambridge, Massachusetts, and we have offices in Dublin (Ireland), Sydney (Australia), New Hampshire, Singapore, Tokyo (Japan), Berlin (Germany), and Bogotá (Colombia).