Security Engineering Manager

For over 20 years, Smartsheet has helped people and teams achieve–well, anything. From seamless work management to smart, scalable solutions, we've always worked with flow. We're building tools that empower teams to automate the manual, uncover insights, and scale smarter. But more than that, we're creating space– space to think big, take action, and unlock the kind of work that truly matters. Because when challenge meets purpose, and passion turns into progress, that's magic at work, and it's what we show up for everyday.

Automation is the key to creating highly reliable and secure large-scale software systems. Are you a leader who can build and guide a team that engineers solutions to complex security and reliability challenges? Can you develop a strategic vision to protect Smartsheet against an evolving landscape of threats?

We are looking for a Manager of DevSecOps to lead part of our global Security Operations team. In this highly visible role, you will be responsible for maturing our security and reliability posture by fostering a culture where these are treated as software engineering challenges. You will lead a team of talented engineers dedicated to building and operating a highly reliable, scalable, and defensible production environment. This is a unique opportunity to blend your deep technical expertise with your passion for leadership, working at the intersection of infrastructure, automation, and security to build a platform that is resilient and secure by design.

You Will:

• Lead and Mentor a High-Performing Team: Hire, develop, and retain top engineering talent. Foster a culture of technical excellence, innovation, and ownership. Provide coaching, career guidance, and performance management for your team.
• Develop the Strategic Roadmap: Define and execute the strategy for security infrastructure, automation, and operations. Collaborate with product and engineering leaders to set priorities and ensure your team's work aligns with business objectives.
• Oversee Secure and Resilient Infrastructure: Guide the architectural design and implementation of secure, scalable, and highly available infrastructure in our multi-cloud (predominantly AWS) environment. Champion the use of Infrastructure as Code (IaC) with tools like Terraform and Helm.
• Drive Security Automation Initiatives: Prioritize and direct the engineering of automated solutions for threat detection, incident response, and vulnerability management. Ensure your team is building the tools and workflows that allow us to respond to threats at machine speed.
• Champion a "Secure by Design" SDLC: Partner with development teams to embed security into the CI/CD process. Advocate for the integration of automated security tooling (SAST, DAST, SCA) to provide developers with fast, actionable feedback.
• Lead Incident Response Strategy: Oversee the team's incident response activities, acting as a point of escalation and leadership during major security and reliability events. Drive the blameless post-mortem process to ensure that incidents result in durable, engineered solutions.
• Manage Automated Compliance Programs: Ensure the team's technical controls and automation efforts effectively support continuous compliance with frameworks such as FedRAMP, SOC 2, and ISO 27001.

You Have:

• 10+ years of progressive experience in technology, with at least 3 years in a direct people management role for a technical team like Site Reliability Engineering, DevOps, or Security Engineering.
• A BS or MS in Computer Science, Engineering, or a related field, or equivalent industry experience.
• Proven experience leading teams that manage large-scale cloud environments, preferably AWS, with a strong understanding of core infrastructure and security services.
• Demonstrated ability to set technical direction for a team using Infrastructure as Code (Terraform), container orchestration (Kubernetes), and modern CI/CD practices.
• A strong technical background in a scripting or programming language such as Python, Go, or Java.
• Strong agile development skills
• Deep understanding of the modern security operations toolchain, including SIEM, EDR, and vulnerability management technologies.
• Exceptional leadership, communication, and interpersonal skills, with the ability to inspire your team and communicate complex technical concepts to non-technical stakeholders. Fluency in English is required.
• A strategic mindset with a proven ability to solve complex problems and make data-driven decisions in high-pressure environments.

Nice to Have

• Advanced industry certifications such as CISSP, CISM, or cloud-specific security certifications.
• Direct experience with compliance frameworks like FedRAMP, ISO27001, or SOC2.
• Experience managing as part of a globally distributed team.

Get to Know Us:

At Smartsheet, your ideas are heard, your potential is supported, and your contributions have real impact. You'll have the freedom to explore, push boundaries, and grow beyond your role. We welcome diverse perspectives and nontraditional paths—because we know that impact comes from individuals who care deeply and challenge thoughtfully. When you're doing work that stretches you, excites you, and connects you to something bigger, that's magic at work. Let's build what's next, together.

Equal Opportunity Employer:

Smartsheet is an Equal Opportunity (EEO) employer committed to fostering an inclusive environment with the best employees. It is our policy to provide equal employment opportunities to all qualified applicants in accordance with applicable laws in the US, UK, Australia, Germany, Costa Rica, Japan, Bulgaria, and India. All qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information. 

If there are preparations we can make to help ensure you have a comfortable and positive interview experience, please let us know.

#LI-Remote