Senior Engineering Manager, Threat Operations

HubSpot | Engineering | North America

About the role

HubSpot's Threat Operations team protects our products and customers against a constantly evolving threat landscape. As Senior Engineering Manager, you'll lead an organisation of over 20 people across threat intelligence, vulnerability identification and mitigation, and incident detection and response. Your teams will be responsible for identifying, containing, and responding to security threats at an ever increasing scale as the threat landscape rapidly evolves in the world of AI.

In this role you will be expected to have a high degree of collaboration with various other functions within the organisation including legal and compliance as well as engineering leadership within HubSpot's product organisation. You will need to find the right balance between increasing HubSpot's overall security posture while at the same time limiting the friction from these security controls for the products and engineers that are affected by them.

This is a role for someone who came up through security and picked up engineering along the way — not the other way around. If you're energised by the constant pressure of an active threat environment and thrive under changing priorities, this is the team for you.

At HubSpot, security isn't just a checkbox—it's woven into everything we do. By owning and evolving our threat operations presence, you'll be enabling our teams and customers to grow better, together. If you're motivated to strengthen threat detection and response for millions of organizations at scale, you'll find this opportunity exciting!

What you'll do

• Lead and grow a high-performing team of ~25 engineers across threat intelligence, incident response, and detection engineering
• Set the technical and strategic direction for how HubSpot detects, responds to, and learns from security threats
• Own incident response end-to-end — from detection through to resolution and post-incident review
• Drive the development of threat intelligence capabilities that inform and sharpen HubSpot's defensive posture
• Ensure compliance with security specifications and partner closely with legal and compliance stakeholders
• Build strong relationships with InfraSec leadership and the CISO's office; act as a trusted security partner to the business
• Contribute to cross-functional hiring, planning, and investment decisions within the broader security organisation

What we're looking for

• 10+ years of experience in security, with engineering management experience at a meaningful scale (15+ people)
• Security professional first — you built your career in security (threat intelligence, incident response, detection, SOC) and developed engineering skills along the way; we're not looking for software engineers who moved laterally into security
• Experience managing managers or Tech Leads, with a track record of growing senior technical talent
• Deep familiarity with incident response and threat detection at scale — you've been in the room when things go wrong and you know how to lead a team through it
• Strong cross-functional presence — comfortable building relationships with legal, compliance, and executive stakeholders including a CISO
• Resilient and adaptable; this is a high-pressure function with constantly shifting priorities and you need to thrive in that environment
• North America-based, East or West Coast preferred

Nice to have

• Experience in a SaaS or cloud-native product company
• Familiarity with compliance frameworks (SOC 2, ISO 27001, FedRAMP)
• Background building or scaling threat intelligence programmes
• Active participation in the security community
• Knowledge of how to employ AI and Agentic solutions to solve security problems

HubSpot is committed to building an inclusive workplace. We welcome applicants of all backgrounds, experiences, and perspectives.