Overview
Principal Software Engineer for Security, Detection & Response, shaping detection engineering, threat intelligence, and incident response solutions.
What you'll do
- Build detection foundations and response frameworks to advance HubSpot’s security posture.
- Develop automated detection systems and prioritize mitigations based on threats and coverage gaps.
- Partner with engineering teams to supply data for purple team exercises and implement risk-mitigating solutions.
- Contribute code to security automations and review designs for detection reliability.
- Mentor engineers and champion detection-in-depth.
- Act as a point of contact for threat intelligence and incident response expertise.
- Filter and correlate IOCs using platforms like Splunk and CrowdStrike.
What you'll need
- 10-15 years of experience in software development and information security focused on detection engineering, threat intelligence, and incident response.
- Experience designing and implementing automated detection systems and managing large-scale security logging infrastructure.
- Expert knowledge of endpoint and network detection (EDR/SASE), plus hands-on CrowdStrike Falcon experience.
- Deep understanding of incident response methodologies/frameworks including NIST 800-61 and SANS.
- Experience correlating identity/cloud/network telemetry to detect post-entry behavior.
- Experience managing and ingesting IOCs and mapping actor techniques to STIX/TAXII.
- Relevant industry certifications such as GCIH, GCFA, CISSP, or vendor-specific EDR certifications.
Details
- Location: Remote - USA.
- May be required to attend a regional HubSpot office for in-person onboarding if joining Engineering.
Read the full description and apply on the company’s own careers page.
● Live
