Sr Security Engineer, Incident Response

For over 20 years, Smartsheet has empowered teams to manage work seamlessly and scale solutions smarter. Now, in our most ambitious chapter yet, we are uniting human teams with AI agents. By orchestrating the work agents do best, automating manual tasks and uncovering insights at scale, we create the space for people to focus on what truly matters: judgment, creativity, and big thinking. That is magic at work, and it’s what we show up for every day. Automation is the key to creating highly reliable and secure large-scale software systems. Are you someone who engineers solutions to problems rather than simply fixing the same thing over and over again? Can you protect Smartsheet against attackers? We are looking for a Senior DevSecOps Engineer to join our global Security Operations team. In this critical role, you will be a leader in maturing our security and reliability posture by treating both as software engineering challenges. You will engineer and operate a highly reliable, scalable, and defensible production environment, directly impacting our ability to deliver a world-class service to our customers 24/7. This is a unique opportunity to blend deep expertise in Site Reliability Engineering (SRE) and modern Security Operations, working at the intersection of infrastructure, automation, and security to build a platform that is resilient and secure by design. You Will: * Engineer Secure and Resilient Infrastructure: Design, build, maintain, and improve secure, scalable, and highly available infrastructure in our multi-cloud environment (primarily AWS) using Infrastructure as Code (IaC) principles with tools like Terraform, Kubernetes, and Helm. * Automate Proactive Security: Engineer and automate threat detection, incident response, and vulnerability management processes. You will build the tools and workflows that allow us to respond to threats at machine speed. * Secure the Software Development Lifecycle: Architect and secure our CI/CD pipelines, integrating automated security tooling (SAST, DAST, SCA) to provide developers with fast, actionable feedback. * Master Container Security: Manage, operate, and secure our container orchestration platform (Kubernetes), implementing best practices for container security from the registry to runtime, including knowledge of hardening requirements such as CIS Benchmarks or DISA STIG. * Lead Incident Response: Act as a technical lead during security and reliability incidents, driving resolution and conducting blameless post-mortems to engineer preventative solutions. * Drive Automated Compliance: Implement and automate technical controls to ensure continuous compliance with frameworks such as FedRAMP, SOC 2, and ISO 27001. * Mentor and Lead: Serve as a subject matter expert for security and reliability, mentoring other engineers and championing a culture of operational excellence and security ownership across the organization. You Have: * 8+ years of progressive experience in technology, with at least 5 years in a hands-on senior role such as Site Reliability Engineering, DevOps, or Security Engineering. * A BS or MS in Computer Science, Engineering, or a related field, or equivalent industry experience. * Expert-level proficiency in at least one major cloud provider, preferably AWS, with deep knowledge of core infrastructure and security services. * Expert-level proficiency with Infrastructure as Code, particularly Terraform. * Expert-level proficiency in a scripting or programming language such as Python, Go, or Ruby, with a proven history of building automation and custom tooling. * Deep experience with containerization and orchestration technologies (Kubernetes), including securing containerized environments. * Proficiency with the modern security operations toolchain, including SIEM, EDR, and vulnerability scanning technologies. * Experience integrating security tools (SAST, DAST, SCA) into CI/CD pipelines. * A critical thinker with a proven ability to troubleshoot complex problems in high-pressure production environments. * Excellent verbal and written communication skills and a collaborative spirit. This will include fluency in English. Nice to Have * Advanced industry certifications such as CISSP, CISM, OSCP, or cloud-specific security certifications. * Experience with compliance frameworks like FedRAMP, ISO27001, SOC2.   Get to Know Us: At Smartsheet, your ideas are heard, your potential is supported, and your contributions have real impact. You’ll have the freedom to explore, push boundaries, and grow beyond your role. We welcome diverse perspectives and nontraditional paths—because we know that impact comes from individuals who care deeply and challenge thoughtfully. When you’re doing work that stretches you, excites you, and connects you to something bigger, that’s magic at work. Let’s build what’s next, together. Equal Opportunity Employer: Smartsheet is an Equal Opportunity (EEO) employer committed to fostering an inclusive environment with the best employees. It is our policy to provide equal employment opportunities to all qualified applicants in accordance with applicable laws in the US, UK, Australia, Germany, Costa Rica, Japan, Bulgaria, India, and Singapore. All qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information.  If there are preparations we can make to help ensure you have a comfortable and positive interview experience, please let us know.   #LI-Remote

Senior Software Engineer, Content AI Warsaw, PL The Senior Software Engineer acts as the technical lead for an agile team, focusing on the design and development of scalable microservices for Peloton's core features across all platforms (Bike, Tread, Strength, and Digital). The Content AI Team is responsible for training and hosting various models in the domains of Natural Language Processing (NLP) and Automatic Speech Recognition (ASR). This role is highly collaborative, requiring close partnership with Product, Design, and QA throughout the development lifecycle. The candidate will be responsible for designing, developing, testing, deploying, and monitoring microservices that specifically power features like search, voice, and captions, which are crucial for platform expansion and international growth. In addition to technical delivery, excellent communication and engineering skills are essential for providing guidance to junior team members and effectively coordinating with other stakeholders, such as Technical Program Managers (TPM). YOUR DAILY IMPACT AT PELOTON * Design, develop and operate business-critical APIs and services with a focus on high availability, low latency, security and scalability * Mentor junior engineers in the team and communicate effectively with TPM and Product * Write understandable, well tested code with an eye towards maintainability and scalability * Architect and build reusable code, libraries, and patterns for use across teams * Propose, experiment, and implement solutions to scale services while meeting business and product requirements.  * Leverage production monitoring/profiling/tracing and load testing tools to discover bottlenecks and using techniques such as data modeling, query optimization, and caching to address the bottlenecks * Lead technical discussions during architecture meetings, design reviews, and task breakdown * Identify common patterns as well as develop and foster development of reusable components and standards across teams * Champion and implement industry best practices such as feature toggles, CI/CD, test automation, logging, and monitoring in order to ensure confidence in our release process * Mentor and coach engineers through code reviews, pair programming, and technical guidance * Participate in on-call rotations and lead incident response efforts to maintain system reliability * Collaborate and partner with cross-functional team members from Product, Design, and QA whilst serving as a domain expert in your area YOU BRING TO PELOTON * MS or BS degree in fields such as Computer Science, Engineering or Mathematics. * 6+ years of software development experience building high-performance, highly scalable backend cloud application systems * Expertise in Kotlin, Python, or similar languages * Strong experience with Spring Boot, Bottle/Gunicorn, or similar backend web frameworks (JVM or Python) * Experience with both relational (e.g. PostgreSQL, MySQL) and NoSQL (e.g. DynamoDB, Mongo) databases * Hands-on experience with Elastic Search query optimization and scaling * Experience with caching systems such as Memcache, Redis * Experience with request processing such as REST, gRPC, or GraphQL * Proven ability to work in high growth, fast-paced environments and adapt to change * Experience with Docker and Kubernetes for containerization and orchestration * Experience with AWS services (DynamoDB, S3, ECR, IAM, Lambda, SQS) and cloud infrastructure design * Experience with deployment tooling such as Terraform, GitHub Actions, Jenkins * Experience with observability and monitoring tools such as Datadog or similar APM solutions * Strong understanding of API design principles, security best practices, and performance optimization * Experience with production support, leading incident response, and troubleshooting complex distributed systems * Experience collaborating with and influencing cross-functional team members from Product, Design, and QA Bonus Points * Experience with building personal voice digital assistants or chatbots * Experience with building search platforms, personalizing search and discovery  * Worked with automatic speech recognition (ASR)    ABOUT PELOTON: Peloton (NASDAQ: PTON) provides Members with expert instruction, and world class content to create impactful and entertaining workout experiences for anyone, anywhere and at any stage in their fitness journey. At home, outdoors, traveling, or at the gym, Peloton brings together innovative hardware, distinctive software, and exclusive content. Founded in 2012 and headquartered in New York City, Peloton has millions of Members across the US, UK, Canada, Germany, Australia, and Austria. For more information, visit www.onepeloton.com. Peloton is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws. Equal employment opportunity has been, and will continue to be, a fundamental principle at Peloton, where all team members, applicants, and other covered persons are considered on the basis of their personal capabilities and qualifications without discrimination because of race, color, religion, sex, age, national origin, disability, pregnancy, genetic information, military or veteran status, sexual orientation, gender identity or expression, marital and civil partnership/union status, alienage or citizenship status, creed, genetic predisposition or carrier status, unemployment status, familial status, domestic violence, sexual violence or stalking victim status, caregiver status, or any other protected characteristic as established by applicable law. This policy of equal employment opportunity applies to all practices and procedures relating to recruitment and hiring, compensation, benefits, termination, and all other terms and conditions of employment.  If you would like to request any accommodations from application through to interview, please email: applicantaccommodations@onepeloton.com. At Peloton, we embrace technology, including AI, to enhance productivity and accelerate innovation in the work we do for our members. However, in our hiring process, our priority remains in getting to know you and your unique qualifications. To ensure a fair and equitable process, we do not permit the use of AI tools during any stage of the application and interview process. In considering you as an applicant, we want to understand your skills, experiences, and motivations without mediation through an AI system. We also want to directly assess your communication skills without the use of an AI tool.  Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act, the City of Los Angeles Fair Chance Initiative for Hiring Ordinance and the San Francisco Fair Chance Ordinance, as applicable to applicants applying for positions in these jurisdictions. Please be aware that fictitious job openings, consulting engagements, solicitations, or employment offers may be circulated on the Internet in an attempt to obtain privileged information, or to induce you to pay a fee for services related to recruitment or training. Peloton does NOT charge any application, processing, or training fee at any stage of the recruitment or hiring process. All genuine job openings will be posted here on our careers page and all communications from the Peloton recruiting team and/or hiring managers will be from an @onepeloton.com email address.  If you have any doubts about the authenticity of an email, letter or telephone communication purportedly from, for, or on behalf of Peloton, please email applicantaccommodations@onepeloton.com before taking any further action in relation to the correspondence. Peloton does not accept unsolicited agency resumes. Agencies should not forward resumes to our jobs alias, Peloton employees or any other organization location. Peloton is not responsible for any agency fees related to unsolicited resumes.