Platform Security And Privacy Engineer

Hubspot Cambridge , MA 02138

Posted 11 months ago

The Product Security and Privacy team is responsible for driving security and privacy across all of the product teams within HubSpot. This is a new area of focus for product at HubSpot and the team is growing. The Product Security and Privacy team will be creating and updating the standards for secure development and privacy by design at HubSpot. This includes developing tools and monitoring that make it easy to implement these standards, put the customer first, and use good judgement around security and privacy issues.

We'll be educating other developers on their responsibilities, best practices, and why security and privacy matter to our customers. We'll be ensuring HubSpot can easily identify and protect all personal data. We will move forward through a combination of systems and policies, tools and automation, monitoring and testing. The team will also help respond to incidents relating to security and privacy and have operational responsibility for the systems we create.

You'll have the opportunity to work cross collaboratively with front- and back-end development teams, Legal, IT Security and Compliance, and Business Systems to ensure that together we have the right coverage across myriad security and privacy areas.

What We're Looking For

We need a wide range of skill sets on the Product Security and Privacy team, and know we're not going to get everything in one person. We believe in bringing in people with diverse backgrounds and providing both formal training and on-the-job cross-training within the teams. So if you're a developer with an interest in privacy and/or security, or a pen tester, security analyst or engineer with a desire to improve your coding skills, come join us!

Our ideal candidate will have some mix of the following skills (this is our wish list not a must have list):

  • Secure Development/SDLC

  • Privacy Engineering

  • Red Team testing/pentesting

  • DevOpsSec/security automation

  • Java, Python, Bash

  • Pipeline Security Testing

  • Secure Secrets Management, Vault, Secret Server

  • OAuth, SCIM

  • AWS, IAM, Security Groups

  • Burp suite, ZAP, Metasploit,

  • BDD security, Gauntlt, Mittn

  • SonarQube, Findbugs, Appscan, Coverity

  • System Hardening/Security configuration


  • Puppet and other Configuration Management tools

  • Pipeline Testing

  • Vulnerability Management

  • Risk Analysis

  • Data Science/Machine Learning

  • Statistical Analysis

Confidence can sometimes hold us back from applying for a job. But we'll let you in on a secret: there's no such thing as the 'perfect' candidate. HubSpot is a place where everyone can grow. So however you identify and whatever background you bring with you, please apply if this is a role that would make you excited to come into work every day.

About HubSpot

HubSpot helps millions of organizations grow better, and we'd love to grow better with you. Our business builds the software and systems that power the world's small to medium-sized businesses. Our company culture builds connections, careers, and employee growth. How? By creating a workplace that values flexibility, autonomy, and transparency. If that sounds like something you'd like to be part of, we'd love to hear from you.

You can find out more about our company culture in the HubSpot Culture Code, which has more than 3M views, and learn about our commitment to creating a diverse and inclusive workplace, too. Thanks to the work of every HubSpotter globally who has helped build our remarkable culture, HubSpot has been named a top workplace by Glassdoor, Fortune, Entrepreneur, and more.

HubSpot was founded in 2006. We're headquartered in Cambridge, Massachusetts, and we have offices in Dublin (Ireland), Sydney (Australia), New Hampshire, Singapore, Tokyo (Japan), Berlin (Germany), and Bogot (Colombia).

icon no score

See how you match
to the job

Find your dream job anywhere
with the LiveCareer app.
Mobile App Icon
Download the
LiveCareer app and find
your dream job anywhere
App Store Icon Google Play Icon

Boost your job search productivity with our
free Chrome Extension!

lc_apply_tool GET EXTENSION

Similar Jobs

Want to see jobs matched to your resume? Upload One Now! Remove
Developer Advocate Chrome Privacy

Google Inc.

Posted Yesterday

VIEW JOBS 2/18/2020 12:00:00 AM 2020-05-18T00:00 The Web Developer Relations team is focused on supporting the long term health of the web platform by working with developers to create the guidance and tools, samples and apps they need to be successful. We make it easy for web developers to build great experiences quickly on the web. We work with Product teams to convey feedback from developers to help identify and prioritize changes to the platform and we work with developers to help build next-generation of tools that developers will use every day. As a Developer Advocate, you will focus on understanding, documenting and educating the ecosystem around privacy and security on the web with activities ranging from inspiring developers with the latest advancements in the platform to educating the industry on why a safer web is critical and how to achieve it. You will ensure that developers are aware of the changes that we are making to the platforms and have adapted appropriately before they are launched by using the various signals and knowledge of the ecosystem to identify, diagnose and help to fix breakages to ensure a healthy and happy web ecosystem. The role will focus on the creation and development of best practices by working to prioritize the direction of both our Privacy and Security core features and future products. Minimum qualifications: * Bachelor's degree in Computer Science or equivalent practical experience. * 5 years of relevant work experience. * Experience working in a support or consulting position with customers. Preferred qualifications: * Experience with public speaking. * Experience developing or working with APIs. * Experience blogging and writing technical articles. * Advocate for the adoption of the Chrome Privacy Sandbox to partners and the broader developer community with a focus on identifying web breakage before our users experience it. * Provide technical guidance and expertise to partner teams using/integrating with Chrome Privacy Sandbox (i.e., best practices, bug resolution and what topics on the roadmap might be relevant to them). * Work with team on content planning and prioritization. * Promote developer products in-person and online by presenting at conferences, blogging, writing technical tutorials, etc. * Advocate for developers internally and consult Google developer product strategy by working with Product Management, Engineering, PR, Marketing, Business Development and cross-functional teams to help get developers what they need from our products. Google Inc. Cambridge MA

Platform Security And Privacy Engineer