Field Security Engineer - Sr. Security Engineer I

A customer-facing security engineer in Smartsheet's GRC Engineering group who explains the product's security posture to enterprise customers, from their engineers to their CISOs, clears security obstacles in sales cycles, and turns customer requirements into new security features. The role reports to the Senior Director, GRC Engineering, in Bellevue or remote in the US.

The engineer walks customers through pen test, vulnerability and NIST 800-53 gap results and drafts deviation rationales, maps FedRAMP and NIST controls onto Smartsheet's Terraform, Kubernetes, pipelines and AWS and GCP setup, answers complex security questionnaires with automation and AI, supports executives during major customer incidents, writes feature specs with product engineering and IT, and speaks at events. Smartsheet wants five or more years in security engineering, architecture or sales engineering, hands-on SSO, IdP and MFA work, and familiarity with NIST 800-53, SOC 2, FedRAMP and HIPAA.