Principal Security Engineer

We're looking for a Principal Security Engineer to own the highest-leverage application security work at Smartsheet: leading threat modeling and product security reviews across a modern SaaS platform used by millions of customers, serving as the team's technical authority on AI security risk, and setting the technical standard for application security practice across the engineering organization.

10+ years in application security with sustained technical leadership, including ownership of threat modeling programs and security review services. Hands-on experience securing AI-integrated applications (LLM, agentic systems). Ability to own threat modeling as systematic practice (STRIDE). Experience with architecture review and manual code review for complex SaaS features. Mentoring experience. Depth in SAST, SCA, secrets, and IaC scanning. Fluent in Python, Java, TypeScript, Go.