Manager, Application Security (Remote Eligible)

For over 20 years, Smartsheet has helped people and teams achieve–well, anything. From seamless work management to smart, scalable solutions, we’ve always worked with flow. We’re building tools that empower teams to automate the manual, uncover insights, and scale smarter. But more than that, we’re creating space– space to think big, take action, and unlock the kind of work that truly matters. Because when challenge meets purpose, and passion turns into progress, that’s magic at work, and it’s what we show up for everyday.

Automation and partnership are the keys to creating highly reliable and secure software systems. We are looking for a Manager of Application Security to lead a team of talented engineers dedicated to our "shift-left" mission. In this role, you will bridge the gap between security and engineering, fostering a culture where security is treated as a software engineering challenge.

You will partner closely with product and engineering teams to embed security into the development lifecycle, ensuring our platform is resilient and secure by design. This is a unique opportunity to blend technical expertise with leadership, working at the intersection of infrastructure, automation, and application security.

You will report to our Sr. Director of Engineering located in our Bellevue, WA office, or you may work remotely from anywhere in the US where Smartsheet is a registered employer.

You Will:

• Lead and Mentor a High-Performing Team: Hire, develop, and retain top engineering talent. Foster a culture of technical excellence and ownership while providing coaching, career guidance, and performance management for your direct reports.

• Champion "Shift-Left" Security: Partner with development teams to embed security into the CI/CD process. Advocate for and operationalize automated security tooling (SAST, DAST, SCA) to provide developers with fast, actionable feedback.

• Manage External Security Assessments: Oversee the strategy and operations for both the Responsible Disclosure program and third-party penetration testing. You will handle scoping, vendor management, triage, and the facilitation of remediation with internal engineering teams.

• Advise on Customer-Facing Security Features: Collaborate with Product and Engineering teams to provide technical feedback and security requirements for customer-facing features (e.g., encryption controls, audit logging, identity management). You will ensure we are building product capabilities that solve security challenges for our customers.

• Execute the Security Roadmap: Collaborate with leadership to implement the strategy for security infrastructure and automation. Ensure your team’s work aligns with business objectives and effectively reduces risk.

• Drive Security Automation: Prioritize the engineering of automated solutions for threat detection and vulnerability management. Ensure your team builds tools that allow us to respond to threats at machine speed.

• Enable Incident Response & Compliance: Oversee the team's participation in incident response activities and ensure technical controls support continuous compliance with frameworks such as FedRAMP, SOC 2, and ISO 27001.

You Have:

• 7+ years of progressive experience in technology, with at least 1-2 years in a management or team lead role for a technical team (AppSec, DevSecOps, or Site Reliability Engineering).

• Technical Background: A BS/MS in Computer Science or equivalent experience, with a strong background in scripting/programming (Python, Go, or Java) and agile development.

• AppSec & Cloud Expertise: Experience with modern application security toolchains (SAST, DAST), vulnerability management, and cloud environments (preferably AWS).

• Framework Knowledge: Familiarity with application security requirements for regulated markets (e.g., FedRAMP, HIPAA, SOC2).

• Collaboration Skills: Proven ability to build partnerships between engineering/development and security teams, influencing them to adopt best practices.

• Communication Skills: Demonstrates the ability to communicate clearly and effectively, both in writing and verbally, with technical and non-technical stakeholders.

• Planning and Execution: Ability to translate strategy into actionable plans, manage timelines, and ensure reliable execution.

• Decision-Making and Judgment: Ability to make timely, well-reasoned decisions with incomplete information, balancing security risk, business impact, and delivery timelines.

Nice to Have

• Industry certifications such as CISSP, CISM, or cloud-specific security certifications.

• Experience leading and supporting teams that are globally distributed across time zones and geographies.

Current US Perks & Benefits:

• HSA, 100% employer-paid premiums, or Buy-up medical/vision and dental coverage options for full-time employees

• 401k Match to help you save for your future (50% of your contribution up to the first 6% of your eligible pay)

• Monthly stipend to support your work and productivity

• Flexible Time Away Program, plus Sick Time Off

• US employees are automatically covered under Smartsheet-sponsored life insurance, short-term, and long-term disability plans

• US employees receive 12 paid holidays per year

• Up to 24 weeks of Parental Leave

• Personal paid Volunteer Day to support our community

• Opportunities for professional growth and development including access to Udemy online courses

• Company Funded Perks, including a counseling membership, local retail discounts, and your own personal Smartsheet account

• Teleworking options from any registered location in the U.S. (role specific)

Smartsheet provides a competitive base salary range for roles that may be hired in different geographic areas we are licensed to operate our business from. Actual compensation is determined by several factors including, but not limited to, level of professional, educational experience, skills, and specific candidate location. In addition, this role will be eligible for a market competitive incentive opportunity.

US Base Salary Pay Range
$175,000—$227,500 USD

Get to Know Us:

At Smartsheet, your ideas are heard, your potential is supported, and your contributions have real impact. You’ll have the freedom to explore, push boundaries, and grow beyond your role. We welcome diverse perspectives and nontraditional paths—because we know that impact comes from individuals who care deeply and challenge thoughtfully. When you’re doing work that stretches you, excites you, and connects you to something bigger, that’s magic at work. Let’s build what’s next, together.

Equal Opportunity Employer:

Smartsheet is an Equal Opportunity (EEO) employer committed to fostering an inclusive environment with the best employees. It is our policy to provide equal employment opportunities to all qualified applicants in accordance with applicable laws in the US, UK, Australia, Germany, Costa Rica, Japan, Bulgaria, and India. All qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information.

If there are preparations we can make to help ensure you have a comfortable and positive interview experience, please let us know.

#LI-Remote