Principal Software Engineer, Security

About the Role HubSpot is seeking a Principal Software Engineer to shape and deliver secure, robust, and scalable identity and access solutions for our growing platform. In this pivotal role, you will drive secure software design, influence the technical direction, and implement best-in-class security practices to protect our products and customers. What You'll Do

• Contribute code, review designs, and provide technical mentorship to engineers, championing security in all work.
• Partner with engineering and security teams to translate organizational priorities into tangible, secure engineering outcomes.
• Guide architectural decisions and establish security best practices across projects within your org.
• Ensure security is woven into the software development lifecycle and align product/security strategies with guardrails and customer trust.
• Shape our approach to securing AI initiatives and foster capabilities for building secure AI systems.
• Collaborate with product managers, legal/compliance, and cross-functional teams to minimize risk and protect data. What We're Looking For
• 10+ years of experience in software development and information security, with a focus on identity, access, and applied cryptography.
• Proven experience designing and implementing identity infrastructure and other foundational security services in a cloud-native environment.
• Expert knowledge of secure development, public cloud security, and network security.
• Deep understanding of Zero Trust concepts: identity-centric security, continuous verification, and least-privilege access across distributed environments.
• Experience designing and leading large-scale migrations with safe, secure, and minimal-impact transitions.
• Demonstrated experience in, or a strong willingness to learn, securing AI systems (AI/ML workflows, training data, models, agents, deployments).
• Comfortable leveraging AI development tools (GitHub Copilot, Claude, ChatGPT) to enhance productivity and code quality.
• Proven track record of mentoring security engineers and strong communication skills across technical and non-technical audiences.
• Commitment to staying current with security trends and continuous learning; knowledge of SOC 2, ISO 27001, NIST 800-53, GDPR.
• Industry certifications (e.g., CISSP, CEH, Azure Cybersecurity Architect, AWS Specialty, etc.). Compensation & Benefits
• Cash compensation includes base salary, on-target commission, and annual bonus targets; equity RSUs may be available; some roles may be eligible for overtime pay.
• Some roles may participate in HubSpot’s equity plan (RSUs).
• HubSpot emphasizes transparency and offers benefits and perks as part of total compensation.