Senior Security Engineer (Customer Trust)

Join Smartsheet as a Senior Security Engineer (Customer Trust) and lead our US customer trust operations. You'll manage questionnaire triage and completion, support customer engagements, and build trusted relationships with enterprise customers. This role requires a strong technical security foundation, excellent communication skills, and a collaborative mindset. Enjoy a range of benefits including a lucrative employee stock purchase program, 401k match, flexible time away program, and opportunities for professional growth and development.

• Gérer l'entrée, le tri, la priorisation et l'achèvement des questionnaires de sécurité des clients, des évaluations des risques des fournisseurs et des demandes de renseignements pour les clients basés aux États-Unis.
• Répondre aux demandes de renseignements sur la sécurité des clients avec une profondeur technique, en complétant les questionnaires avec précision et en abordant les préoccupations en matière de sécurité.
• Établir des relations avec les clients et fournir une assurance en matière de sécurité, en devenant une ressource de confiance pour les équipes de sécurité des clients.
• Proven track record completing customer security questionnaires, vendor assessments, and conducting security RFI responses
• Working knowledge of GRC frameworks and standards: Familiarity with SOC 2, ISO 27001, NIST frameworks, HIPAA, and compliance assessment practices
• 5+ years of experience in customer trust, vendor risk, security assessment, or customer-facing security engineering roles at SaaS or cloud platform companies
• A degree in Computer Science, Computer Engineering, Cybersecurity or a related field or equivalent practical experience
• Eligible to work in the United States
• Strong technical security foundation: Understanding of cloud architecture (AWS, GCP, Azure), application security, access controls, encryption, logging, incident response, and data protection sufficient to answer technical questions credibly
• Queue management and SLA discipline: Comfort with ticketing systems, managing multiple concurrent requests, tracking dependencies, and prioritizing work
• Excellent written and verbal communication: Ability to explain complex security topics clearly to both technical and non-technical audiences. Skill in adapting communication style for different customers and contexts
• Collaborative mindset and cross-functional teamwork: Ability to work effectively with sales, customer success, product security, and engineering teams. Strong at seeking help when needed and escalating appropriately
• Understanding of AI governance, emerging AI risks, and how customers are evaluating AI security in SaaS platforms
• Background in SaaS security operations or security operations center (SOC) environments
• Professional security certifications: CISSP, CCSK, CISM, CompTIA Security+, or equivalent
• Experience with questionnaire and vendor risk management platforms (Targhee, OneTrust, SAFE, etc.)