Distinguished Software Engineer (Chief Security Architect)

POS-29752

HubSpot is seeking an exceptional Chief Security Architect to lead the vision, strategy, and design of our security infrastructure. In this highly influential role, you will leverage your proven track record of solving some of the hardest, most impactful problems in the field of security to define and elevate the future of security at Hubspot. This is a hands-on technical role, where you will produce technology directly, and are able to dive deep into technical details. 

At Hubspot, Security is a core value, and you will play a key role in ensuring our platform stays resilient against emerging threats and our security practices are world-class. If you are inspired by the challenge of securing millions of organizations in their quest to “Grow Better”, this is your opportunity!

Responsibilities

As a Chief Security Architect, you will be a key driver of HubSpot's security posture. You will use your expertise to bridge the gap between diverse teams in Product and Corporate security and create a strategy that ensures defense-in-depth, aligning with business objectives and the evolving threat landscape. This is a hands-on role where you will be trusted with the most complex business challenges that require collaboration, technical mastery, and technical leadership that spans the company. Moving across domains effortlessly, you will challenge conventions and what is possible by reexamining constraints. 

A critical part of your role will be to identify and assess security risks across the organization, designing and implementing controls and mitigation strategies to protect our assets. You will partner with engineering, product, and legal teams to align security strategy and outcomes with the broader product and technical strategy, and integrate security into the entire development lifecycle in ways that build security in by default. Additionally, you will lead the investigation of security incidents, provide in-depth post-event analysis and recommendations for improvement, and act as a subject matter expert and mentor to other security professionals, fostering a culture of security awareness and excellence. 

You will also drive the evolution of our AI security strategy while mentoring others and elevating the organization’s expertise and capabilities in securing AI technologies. 

Key Expectations 

We are looking for an experienced and forward-thinking security leader with the following qualifications:

• 15+ years of experience in software development and  information security, with a focus on security architecture, risk assessment, and threat modeling.
• Proven experience in designing and implementing comprehensive security frameworks in a cloud-native environment.
• Expert knowledge of secure development, public cloud security, and network security.
• Deep understanding and practical implementation experience with Zero Trust principles, including identity-centric security, continuous verification, and least-privilege access across distributed environments.
• Hands-on experience with Incident Response, Data Security, and Privacy Engineering.
• Demonstrated expertise in - or a strong willingness to learn - securing artificial intelligence systems such as AI/ML workflows, training data, models, agents, and deployments, to mitigate emerging AI-specific threats.
• Comfortable with leveraging and championing AI development tools (such as GitHub Copilot, Claude, ChatGPT) to enhance productivity and code quality
• Proven track record of mentoring and developing other security engineers, fostering technical growth and elevating security expertise across the org.
• Ability to align security architecture with the company's long-term business strategy. This involves understanding business needs, identifying risks, and developing solutions that support business objectives.
• Excellent communication skills, with the ability to articulate complex security concepts to both technical and non-technical audiences.
• A passion for staying current with the latest security trends and a commitment to continuous learning.
• Strong understanding of security, privacy, and compliance standards such as SOC 2, ISO 27001, NIST 800-53 and GDPR.
• Relevant industry certification (e.g., CISSP, CEH, Azure Cybersecurity Architect, AWS Speciality, etc.)
• You will elevate HubSpot's external brand and recruiting efforts and help us attract top talent.
• You are expected to model our Engineering Leadership Mission and embody HubSpot’s HEART and DI&B values