Principal Software Engineer, Security, Detection & Response

HubSpot (NYSE: HUBS) is an AI-powered customer platform with all the software, integrations, and resources customers need to connect marketing, sales, and service. HubSpot's connected platform enables businesses to grow faster by focusing on what matters most: customers. At HubSpot, bold is our baseline. Our employees around the globe move fast, stay customer-obsessed, and win together. Our culture is grounded in four commitments: Solve for the Customer, Be Bold, Learn Fast, Align, Adapt & Go!, and Deliver with HEART. These commitments shape how we work, lead, and grow. We’re building a company where people can do their best work. We focus on brilliant work, not badge swipes. By combining clarity, ownership, and trust, we create space for big thinking and meaningful progress. And we know that when our employees grow, our customers do too. Recognized globally for our award-winning culture by Comparably, Glassdoor, Fortune, and more, HubSpot is headquartered in Cambridge, MA, with employees and offices around the world.

As a Principal Software Engineer, you will play a leading role in building strong detection foundations and response frameworks to advance HubSpot’s security posture. You will be a trusted technical leader, driving the development of automated detection systems and prioritizing mitigations based on current threats and coverage gaps. You will partner closely with engineering teams to supply data for purple team exercises and implement practical solutions that mitigate risks. Your deep technical knowledge will help guide architectural decisions for our corporate security logging infrastructure and SIEM. Day-to-day, you’ll contribute code to security automations, review designs for detection reliability, and provide technical mentorship to engineers—championing detection-in-depth in everything we do You’ll act as a key point of contact for threat intelligence and incident response expertise—ensuring that HubSpot’s products meet both internal guardrails and external customer trust needs. You will support incident response efforts by aiding in investigations, understanding bad actor behaviors, and proactively anticipating future actions. You will work closely with product managers and legal/privacy partners to ensure incident response standards like NIST and SANS are woven into our lifecycle. You will also produce actionable intelligence by filtering and correlating data from indicators of compromise (IOCs) using platforms like Splunk and CrowdStrike The secure systems and practices you establish will have a real and lasting impact on upholding the integrity of the data entrusted to HubSpot. By evaluating customer impact on threats and maintaining relationships with industry contacts for intelligence sharing, you will directly contribute to a secure experience for every customer—enabling them to focus on running and growing their business with confidence