Technical Lead II - Security Privacy in London

About the team

The Security Privacy team builds and operates the services that help HubSpot understand, protect, and manage personally identifiable information (PII) across the entire platform. We own a suite of backend and frontend systems that automatically scan HubSpot’s codebase and infrastructure to catalog PII usage and ownership, classify datasets, enforce data protection standards, and orchestrate GDPR deletion workflows when customers exercise their rights. Our tools make it straightforward for every engineering team at HubSpot to know what sensitive data they handle and to do the right thing with it. We sit within the Security Automated Assurance group, and partner closely with HubSpot’s Privacy, Legal, and Security organisations as well as product and infrastructure teams across the company.

About the role

A Technical Lead II is a player‑coach responsible for leading the Security Privacy team. Owns the technical direction for privacy tooling and co‑sets product strategy as part of the TL/PM triad. Leads delivery of complex projects across data privacy, PII management, and data protection domains, often working with other TLs to unblock cross‑team work. Takes proactive ownership for your team’s on‑call health, reliability, and code quality. Grows the engineers around you and builds an inclusive, high‑trust team culture. This is a hands‑on leadership role: you’ll spend a large portion of your time designing systems, writing code, and reviewing changes, while also providing technical guidance and coaching.

In this role, you’ll get to:

• Lead the Security Privacy team building services that catalog PII, classify datasets, enforce data protection standards, and automate GDPR deletion workflows across HubSpot.
• Design and evolve distributed systems that scan HubSpot's codebase and infrastructure to detect PII usage, track dataset ownership, and orchestrate privacy‑related actions at scale.
• Own reliability and on‑call for the services your team runs, including alerting, incident response, and continuous improvement of our data privacy pipelines.
• Collaborate with Privacy, Legal, and Security teams to translate data protection requirements and regulations into robust technical solutions.
• Mentor and coach engineers through design reviews, pairing, and thoughtful feedback, raising the bar on engineering quality and execution.
• Shape the roadmap for how HubSpot manages and protects personal data at scale, balancing long‑term platform investments with near‑term regulatory and business needs.

We’re looking for people who:

• Are senior backend engineers who have already led small teams, projects, or technical areas and are ready for a broader leadership scope.
• Are comfortable designing and operating distributed systems (e.g., microservices, message queues, data pipelines) in production.
• Have strong experience with at least one JVM language (ideally Java) and relational databases (e.g., MySQL); experience with technologies like Kafka, asynchronous processing, or large‑scale data systems is a plus.
• Care deeply about reliability, observability, and operational excellence, and have participated in or run on‑call rotations before.
• Communicate clearly with engineers and non‑engineers, and enjoy working closely with product, design, and non‑technical partners in security and compliance.
• Value mentorship, feedback, and inclusion, and want to help build a team where people from different backgrounds can do their best work.

Nice to have:

• Experience in security, compliance, risk, or privacy domains (e.g., SOX, ISO 27001, SOC reports, data protection) or strong interest in learning this space.
• Background building data or reporting platforms that integrate with third‑party systems and internal data warehouses.
• Experience with Kafka, event‑driven architectures, or large‑scale data ingestion and processing.
• Prior work with auditors, risk, or GRC teams, or building systems that support audits and regulatory requirements.

Why HubSpot

HubSpot engineers work in small, autonomous teams with a high degree of ownership over what they ship and how they run it in production. We deploy frequently, learn quickly from our customers, and invest heavily in engineering excellence and developer experience. In Security Automated Assurance, you’ll see a direct connection between the systems you build and HubSpot’s ability to earn and keep our customers’ trust at scale.

We know the confidence gap and impostor syndrome can get in the way of meeting spectacular candidates, so please don’t hesitate to apply — we’d love to hear from you. If you need accommodations or assistance due to a disability, please reach out to us using this form. At HubSpot, we value both flexibility and connection. Whether you’re a Remote employee or work from the Office, we want you to start your journey here by building strong connections with your team and peers. If you are joining our Engineering team, you will be required to attend a regional HubSpot office for in‑person onboarding. If you join our broader Product team, you’ll also attend other in‑person events, such as your Product Group Summit and other gatherings, to continue building on those connections. If you require an accommodation due to travel limitations or other reasons, please inform your recruiter during the hiring process. We are committed to supporting candidates who may need alternative arrangements.

HubSpot, Inc. is an equal opportunity employer. As a federal contractor, we take affirmative action to ensure equal opportunity and all candidates are considered without regard to race, color, religion, national origin, age, sex, sexual orientation, gender identity, marital status, ancestry, physical or mental disability, veteran status, or any other legally protected characteristics.