About the role
What will you do at HubSpot?
HubSpot is looking for a talented Principal Software Engineer to shape and
deliver secure, robust, and scalable identity and access solutions supporting
our growing platform. In this pivotal org-impacting role, you will use your
extensive hands-on engineering experience to drive secure software design,
influence the technical direction of your organization, and implement
best-in-class security practices. You’ll tackle challenging problems and partner
closely with cross-functional peers, making a tangible impact on the safety and
integrity of our products.
At HubSpot, security isn’t just a checkbox—it’s woven into everything we do. By
building secure foundations and scalable systems, you’ll be enabling our teams
and customers to grow better, together. If you’re motivated to strengthen
security for millions of organizations at scale, you’ll find this opportunity
exciting!
RESPONSIBILITIES
As a Principal Software Engineer, you will play a leading role in building
strong security foundations to advance Hubspot’s security posture. You will be a
trusted technical leader within your organization, driving the development and
improvement of secure software systems. You will partner closely with
engineering and security teams to implement practical, hands-on solutions that
mitigate risks and strengthen our product offerings. Your deep technical
knowledge will help guide architectural decisions and establish best practices
across projects in your org. You’ll focus on translating organizational
priorities into tangible, secure engineering outcomes. Day-to-day, you’ll
contribute code, review designs, and provide technical mentorship to
engineers—championing security in everything we do.
You’ll act as a key point of contact for security expertise within the org—
ensuring that Hubspot’s products meet both internal guardrails and external
customer’s trust and security needs. You will work closely with engineers,
product managers, and legal/compliance partners to ensure security is woven into
the software development lifecycle, and that organizational objectives remain
tightly aligned with secure design and delivery. You will also help shape our
approach to securing AI initiatives, sharing your knowledge and fostering
technical capabilities for building secure, innovative AI systems.
The secure systems and practices you establish will have a real and lasting
impact on upholding the security and integrity of the data entrusted to Hubspot
by millions of customers. By proactively identifying and addressing security
risks in our products and aligning Hubspot’s product and security strategies,
you will directly contribute to a secure experience for every customer—enabling
them to focus on running and growing their business with confidence.
KEY EXPECTATIONS
We are looking for an experienced and forward-thinking security leader with the
following qualifications:
* 10+ years of experience in software development and information security,
with a focus on identity, access, and applied cryptography.
* Proven experience in designing and implementing identity infrastructure and
other foundational security services in a cloud-native environment.
* Expert knowledge of secure development, public cloud security, and network
security.
* Deep understanding and practical implementation experience with Zero Trust
principles, including identity-centric security, continuous verification, and
least-privilege access across distributed environments.
* Experience designing and leading the execution of large-scale migrations,
ensuring the safe, secure, and seamless transition of critical systems or
data while minimizing customer impact.
* Demonstrated experience in - or a strong willingness to learn - securing
artificial intelligence systems such as AI/ML workflows, training data,
models, agents, and deployments, to mitigate emerging AI-specific threats.
* Comfortable with leveraging and championing AI development tools (such as
GitHub Copilot, Claude, ChatGPT) to enhance productivity and code quality
* Proven track record of mentoring and developing other security engineers,
fostering technical growth and elevating security expertise across the org.
* Excellent communication skills, with the ability to articulate complex
security concepts to both technical and non-technical audiences.
* A passion for staying current with the latest security trends and a
commitment to continuous learning.
* Strong understanding of security, privacy, and compliance standards such as
SOC 2, ISO 27001, NIST 800-53 and GDPR.
* Relevant industry certification (e.g., CISSP, CEH, Azure Cybersecurity
Architect, AWS Speciality, etc.)
--------------------------------------------------------------------------------
Pay & Benefits
The cash compensation below includes base salary, on-target commission for
employees in eligible roles, and annual bonus targets under HubSpot’s bonus plan
for eligible roles. In addition to cash compensation, some roles are eligible to
participate in HubSpot’s equity plan to receive restricted stock units (RSUs).
Some roles may also be eligible for overtime pay. Individual compensation
packages are tailored to your skills, experience, qualifications, and other
job-related reasons.
This resource
[https://drive.google.com/file/d/1C1TGMkG5mos30bkgmNIap_sSzr-lCOWF/view? usp=sharing]
will help guide how we recommend thinking about the range you see. Learn more
about HubSpot’s compensation philosophy
[https://www.hubspot.com/careers-blog/compensation-philosophy].
Benefits
are also an important piece of your total compensation package. Explore
the benefits and perks [https://www.hubspot.com/careers/benefits] HubSpot offers
to help employees grow better.
At HubSpot, fair compensation practices aren’t just about checking off the box
for legal compliance. It’s about living out our value of transparency with our
employees, candidates, and community.
Annual Cash Compensation Range:
$266,200—$425,900 USD
--------------------------------------------------------------------------------
We know the confidence gap
[https://www.theatlantic.com/magazine/archive/2014/05/the-confidence-gap/359815/] and
impostor syndrome [https://blog.hubspot.com/marketing/impostor-syndrome-tips]
can get in the way of meeting spectacular candidates, so please don’t hesitate
to apply — we’d love to hear from you.
If you need accommodations or assistance due to a disability, please reach out
to us using this form
[https://form.asana.com/? k=Xr9-j19kRaY5T5NjIeyx4Q&d=8587152060687].
--------------------------------------------------------------------------------
At HubSpot, we value both flexibility and connection. Whether you’re a Remote
employee or work from the Office, we want you to start your journey here by
building strong connections with your team and peers. If you are joining our
Engineering team, you will be required to attend a regional HubSpot office for
in-person onboarding. If you join our broader Product team, you’ll also attend
other in-person events, such as your Product Group Summit and other gatherings,
to continue building on those connections.
If you require an accommodation due to travel limitations or other reasons,
please inform your recruiter during the hiring process. We are committed to
supporting candidates who may need alternative arrangements
--------------------------------------------------------------------------------
Massachusetts Applicants: It is unlawful in Massachusetts to require or
administer a lie detector test as a condition of employment or continued
employment. An employer who violates this law shall be subject to criminal
penalties and civil liability.
Germany Applicants: (m/f/d) - link to HubSpot's Career Diversity page here
[https://www.hubspot.com/careers/diversity].
India Applicants: link to HubSpot India's equal opportunity policy here
[https://drive.google.com/file/d/1fTZ0ht2chl1WRI7Tgrbzh9ytZUhL2jG9/view? __hstc=20629287.8bedd818fefb24c6303ec98fcf9dcfff.1724281309795.1724281309795.1724281309795.1&__hssc=20629287.1.1724281309796&__hsfp=1818362978].
--------------------------------------------------------------------------------
About HubSpot
HubSpot (NYSE: HUBS) is an AI-powered customer platform with all the software,
integrations, and resources customers need to connect marketing, sales, and
service. HubSpot's connected platform enables businesses to grow faster by
focusing on what matters most: customers.
At HubSpot, bold is our baseline. Our employees around the globe move fast, stay
customer-obsessed, and win together. Our culture is grounded in four
commitments: Solve for the Customer, Be Bold, Learn Fast, Align, Adapt & Go!,
and Deliver with HEART. These commitments shape how we work, lead, and grow.
We’re building a company where people can do their best work
[https://www.hubspot.com/careers/hybrid-work]. We focus on brilliant work, not
badge swipes. By combining clarity, ownership, and trust, we create space for
big thinking and meaningful progress. And we know that when our employees grow,
our customers do too.
Recognized globally for our award-winning culture by Comparably, Glassdoor,
Fortune, and more, HubSpot is headquartered in Cambridge, MA, with employees and
offices around the world.
Explore more:
* HubSpot Careers [https://www.hubspot.com/careers]
* Life at HubSpot on Instagram [https://www.instagram.com/lifeathubspot]
--------------------------------------------------------------------------------
HubSpot may use AI to help screen or assess candidates, but all hiring decisions
are always human. More information can be found here
[https://www.hubspot.com/careers/hiring-ai]. By submitting your application, you
agree that HubSpot may collect your personal data for recruiting, global
organization planning, and related purposes. We may use CLEAR ID Verification
during the hiring process to confirm your identity and help maintain a safe,
secure, and trusted experience for all candidates. Refer to HubSpot's Recruiting
Privacy Notice [https://legal.hubspot.com/recruiting-privacy-notice] for details
on data processing and your rights.
Which skills does this role require?
Make your next move
Build a shortlist and prepare
Identify the requirements you can demonstrate, then choose examples from your work to discuss with the hiring team.
- Build a focused shortlist before you applyCompare role requirements with your experience and give each application a clear reason.
- Practice explaining your experience in an interviewRehearse your answers before meeting the hiring team.
Other roles to compare
Review the responsibilities and requirements before adding an opening to your shortlist.
AI Risk Engineer
Bright Vision Technologies · Columbus, Ohio, United States
VP – Distinguished Engineer of Generative AI Engineering
Slate Auto · United States
Principal Engineer (AI Engineering)
Wells Fargo · Columbus, Ohio, United States
Principal Electrical Engineer, AI Hardware
Microsoft · Redmond, Washington, United States
Senior Principal Engineer, Enterprise Networking Architecture, Automation and AI
Equinix · Toronto, Ontario, Canada
Knowledge Engineer / Semantic Expert for AI Associate Director
Accenture · St. Louis, Missouri, United States
Role information can change. Confirm current details on the original application page.