Security Content Engineer (Remote Eligible)

Cyber Security is an essential part of Smartsheet's corporate culture. At Smartsheet, we believe that it is the responsibility of each and every employee to safeguard information, protect it from unauthorized access, and ensure regulatory compliance. Cyber Security has a significant effect on privacy, consumer confidence, external reputation, and it is a priority on everyone's agenda.

In this essential role, you will build solutions that help Smartsheet security in detection engineering, identifying telemetry gaps and bridging those gaps by working with various partners within Smartsheet. You will be a part of Dev SecOps function to orchestrate world-class detection and response program.

You will report to our Sr. Manager, Engineering located in our Bellevue,WA office and have the option to work remotely from an Smartsheet registered location within the United States.

You Will:

• Implement effective detection and response program by using industry standard NIST / MITRE attack frameworks
• Be a technical lead responsible for specific areas of computer security incident response activities to include intrusion detection monitoring, scanning, cyber threat reporting, and development/implementation of vulnerability mitigation strategies.
• Lead the evaluation of vendor proposals, our security designs, and latest security technologies and systems.
• Support security audits to ensure compliance with corporate security policies and adherence to best practices.
• Be a mentor to less experienced staff.
• Be passionate in the pursuit of securing Smartsheet's data and essential assets
• Work with a team of security professionals responsible for planning, design, detect, implementation, attack mitigation and ongoing support of security systems of high complexity to fulfill our needs
• Work with other teams to manage endpoint protections effectively and efficiently. In doing so, work with the research team to undertake research of threat vectors and provide mitigation strategies.
• Provide recommendations to the management team to increase effectiveness of organization and technology solutions.
• Respond to and assist with due diligence and our security audit requests pertaining to detection and response.
• Represent Smartsheet at information security and cyber security communities globally.
• Identify opportunities for further enhancements and refinements to security standards and processes.

You Have:

• 7+ years of total experience in the field of cyber security.
• 5+ on detection engineering, penetration testing, security infrastructure tuning / deployment.
• Experience in evaluating threat intelligence feeds to consume it for improving security posture by detecting threat actors and compromises within Smartsheet environments
• Expertise in building scalable detection and response program
• SaaS and Cloud experience
• Relevant certifications such as CISSP, SANS GCIH, SANS GXPN, SANS GIAC, SANS GREM etc.
• OSCP (Offensive Security Certified Professional) is a Plus
• Experience with events, related fields in log records and alerts reported by several data sources such as Mac/Windows/Unix systems, IDS/IPS, AV, HIDS/HIPS, WAFs, EDR, firewalls, and web proxies
• Experience with Cyber Security Operations, Incident Response processes and telemetry engineering
• Expertise in Log aggregation, Correlation and alerting using commercial and Open Source tools
• Experience with SIEM solutions like Splunk, Sumologic, ELK, Securonix
• Python Scripting, Perl, Shell scripting and SecDevOps/automation and or orchestration

Perks & Benefits:

• HSA, 100% employer-paid premiums, or Buy-up medical/vision and dental coverage options for full-time employees
• Equity - Restricted Stock Units (RSUs) with all offers
• Lucrative Employee Stock Purchase Program (15% discount)
• 401k Match to help you save for your future (50% of your contribution up to the first 6% of your eligible pay)
• Monthly stipend to support your work and productivity
• Flexible Time Away Program, plus Incidental Sick Leave
• Up to 24 weeks of Parental Leave
• Personal paid Volunteer Day to support our community
• Opportunities for professional growth and development including access to LinkedIn Learning online courses
• Company Funded Perks, including a counseling membership, primary care membership, local retail discounts, and your own personal Smartsheet account
• Teleworking options from any registered location in the U.S. (role specific) 

Equal Opportunity Employer:

Smartsheet is an Equal Opportunity Employer committed to fostering an inclusive environment with the best employees. We provide employment opportunities without regard to any legally protected status in accordance with applicable laws in the US, UK, Australia, Costa Rica, and Germany. If there are preparations we can make to help ensure you have a comfortable and positive interview experience, please let us know.

At Smartsheet, we strive to build an inclusive environment that encourages, supports, and celebrates the diverse voices of our team members who also represent the diverse needs of our customers. We’re looking for people who are driven, authentic, supportive, effective, and honest. You’re encouraged to apply even if your experience doesn’t precisely match our job description—if your career path has been nontraditional, that will set you apart. At Smartsheet, we welcome diverse perspectives and people who aren’t afraid to be innovative—join us!