Smartsheet is seeking a Senior Software Developer to design, build, and maintain robust security features for their SaaS product, aiming to enhance resilience and trustworthiness, and delight customer CIOs by solving complex security challenges related to data protection, access control, authentication, authorization, and secure communication.
Requirements
- Expert-level proficiency in at least one major programming language such as Java, Kotlin, Go, or Python with a proven history of building scalable and secure applications.
- Deep experience with cloud technologies (AWS, Azure, etc.), particularly in securing cloud-native applications.
- Experience developing, documenting, and supporting secure REST APIs.
- Strong understanding of common security vulnerabilities (e.g., OWASP Top 10) and mitigation techniques.
- Experience with containerization and orchestration technologies (Kubernetes) in a secure development context.
- Proficiency with modern security tools and practices, including static application security testing (SAST), dynamic application security testing (DAST), and software composition analysis (SCA).
- 1 year professional experience leveraging AI-based workflows to author, maintain, review, deploy, and maintain code.
Responsibilities
- Design, build, and implement security features and functionalities directly into our SaaS product using modern programming languages (e.g., Java, Kotlin, Go, TypeScript, Python) and associated frameworks.
- Develop scalable back-end services and APIs with a security-first mindset, ensuring high availability and performance in our multi-cloud environment (primarily AWS).
- Collaborate with product and engineering teams to embed security best practices throughout the entire software development lifecycle, from design to deployment.
- Engineer and automate security controls, threat detection mechanisms, and vulnerability remediation processes within the application.
- Participate actively in code reviews and architectural discussions, advocating for secure coding practices and robust security designs.
- Tackle complex security challenges related to data protection, access control, authentication, authorization, and secure communication within a distributed system.
- Create and maintain API integrations between internal and external systems.
Other
- You will work remotely from Bulgaria.
- Serve as a subject matter expert in application security, mentoring junior engineers and fostering a culture of security ownership across development teams.
- A critical thinker with a proven ability to troubleshoot complex security-related problems in high-pressure production environments.
- Excellent verbal and written communication skills and a collaborative spirit. This will include fluency in English.
- Legally eligible to work in Bulgaria on an ongoing basis.
