Responsibilities
- Build automated detection systems, detection foundations, and response frameworks.
- Develop security automations, contribute code, review detection reliability designs, and mentor engineers.
- Guide architectural decisions for corporate security logging infrastructure and SIEM capabilities.
- Support threat intelligence and incident response investigations, including analysis of bad actor behavior and high-severity CritSits.
- Correlate identity, cloud, network, and other telemetry to detect post-entry behavior and contain threats.
- Manage and ingest Indicators of Compromise and produce actionable intelligence using Splunk and CrowdStrike.
- Support purple team exercises, prioritize mitigations, and partner with engineering, product, legal, and privacy teams.
- Maintain industry relationships for intelligence sharing and help ensure incident response standards and customer trust requirements are met.
Requirements
- 10–15 years of experience in software development and information security, focused on detection engineering, threat intelligence, and incident response.
- Experience designing and implementing automated detection systems and managing large-scale security logging infrastructure such as Splunk and SIEM.
- Expertise in endpoint and network detection, including EDR and SASE, with hands-on CrowdStrike Falcon investigation and response experience.
- Deep understanding of incident response methodologies and frameworks including NIST 800-61 and SANS, with the ability to lead high-severity CritSits.
- Experience correlating diverse identity, cloud, and network telemetry to detect post-entry behavior and contain threats.
- Experience managing and ingesting IOCs and mapping actor techniques to STIX/TAXII.
- Excellent communication skills for explaining complex threat landscapes to technical and non-technical audiences.
- Relevant certifications such as GCIH, GCFA, CISSP, or vendor-specific EDR certifications.
Benefits
- Annual cash compensation is listed at $266,200–$425,900 USD, including base salary, eligible commissions, and bonus targets; some roles may also receive RSUs or overtime eligibility.
- HubSpot offers benefits and perks, with compensation packages tailored to skills, experience, qualifications, and other job-related factors.
- Remote and office work options are available, with required regional HubSpot office onboarding for Engineering employees and accommodations available for travel limitations.
- HubSpot supports accommodations for candidates with disabilities or other needs.
Tech Stack
Categories
About HubSpot
HubSpot is a leading agentic customer platform that provides software and support to help businesses grow better. Our platform includes marketing, sales, service, and website management products that start free and scale to meet our customers’ needs at any stage of growth. Today, thousands of customers around the world use our powerful and easy-to-use tools and integrations to attract, engage, and delight customers. HubSpot's award-winning culture has been recognized by Glassdoor, Great Place to Work, Comparably, Fortune, Entrepreneur, Inc., and more. We build connections, careers, and employee growth by creating a workplace that values flexibility, autonomy, and transparency. You can learn more about our commitment to creating an inclusive and diverse workplace in the HubSpot Culture Code. HubSpot is a flexible company with employees working fully remotely, from an office, or a mix of the two. We are headquartered in Cambridge, MA with offices in Amsterdam, Berlin, Bogota, Dublin, Ghent, London, Madrid, Paris, San Francisco, Singapore, Sydney, Tokyo and Toronto. To learn more about HubSpot, visit www.hubspot.com and to join our team, visit www.hubspot.com/careers