AI Insights
HubSpot

Technical Lead II - Backend

HubSpot · Cambridge, Massachusetts, US
full-timelead (7-12 yrs)Posted 62d ago
Software EngineeringIC4IC + ManagementHybrid
StackJavaJVMMySQLKafkaMicroservicesDistributed SystemsMessage QueuesData PipelinesAsynchronous ProcessingRelational DatabasesEvent-Driven ArchitectureGDPRPII ManagementObservabilityOn-Call / Incident ResponseData ClassificationData Protection

Summary

Hands-on backend Technical Lead II for HubSpot's Security Privacy team, owning privacy tooling systems that catalog PII, enforce data protection standards, and automate GDPR deletion workflows at scale. A player-coach role combining senior engineering with team leadership in a regulated, compliance-sensitive domain.

About the role

POS-31884


About the team

The Security Privacy team builds and operates the services that help HubSpot understand, protect, and manage personally identifiable information (PII) across the entire platform. We own a suite of backend and frontend systems that automatically scan HubSpot’s codebase and infrastructure to catalog PII usage and ownership, classify datasets, enforce data protection standards, and orchestrate GDPR deletion workflows when customers exercise their rights. Our tools make it straightforward for every engineering team at HubSpot to know what sensitive data they handle and to do the right thing with it.

We sit within the Security Automated Assurance group, and partner closely with HubSpot’s Privacy, Legal, and Security organisations as well as product and infrastructure teams across the company.

About the role

A Technical Lead II is a player‑coach responsible for leading the Security Privacy team. You’ll be a high‑performing engineer who:

  • Owns the technical direction for privacy tooling and co‑sets product strategy as part of the TL/PM triad.
  • Leads delivery of complex projects across data privacy, PII management, and data protection domains, often working with other TLs to unblock cross‑team work.
  • Takes proactive ownership for your team’s on‑call health, reliability, and code quality.
  • Grows the engineers around you and builds an inclusive, high‑trust team culture.

This is a hands‑on leadership role: you’ll spend a large portion of your time designing systems, writing code, and reviewing changes, while also providing technical guidance and coaching.

In this role, you’ll get to

  • Lead the Security Privacy team building services that catalog PII, classify datasets, enforce data protection standards, and automate GDPR deletion workflows across HubSpot.
  • Design and evolve distributed systems that scan HubSpot's codebase and infrastructure to detect PII usage, track dataset ownership, and orchestrate privacy‑related actions at scale.
  • Own reliability and on‑call for the services your team runs, including alerting, incident response, and continuous improvement of our data privacy pipelines.
  • Collaborate with Privacy, Legal, and Security teams to translate data protection requirements and regulations into robust technical solutions.
  • Mentor and coach engineers through design reviews, pairing, and thoughtful feedback, raising the bar on engineering quality and execution.
  • Shape the roadmap for how HubSpot manages and protects personal data at scale, balancing long‑term platform investments with near‑term regulatory and business needs.

We’re looking for people who

  • Are senior backend engineers who have already led small teams, projects, or technical areas and are ready for a broader leadership scope.
  • Are comfortable designing and operating distributed systems (e.g., microservices, message queues, data pipelines) in production.
  • Have strong experience with at least one JVM language (ideally Java) and relational databases (e.g., MySQL); experience with technologies like Kafka, asynchronous processing, or large‑scale data systems is a plus.
  • Care deeply about reliability, observability, and operational excellence, and have participated in or run on‑call rotations before.
  • Communicate clearly with engineers and non‑engineers, and enjoy working closely with product, design, and non‑technical partners in security and compliance.
  • Value mentorship, feedback, and inclusion, and want to help build a team where people from different backgrounds can do their best work.

Nice to have

  • Experience in security, compliance, risk, or privacy domains (e.g., SOX, ISO 27001, SOC reports, data protection) or strong interest in learning this space.
  • Background building data or reporting platforms that integrate with third‑party systems and internal data warehouses.
  • Experience with Kafka, event‑driven architectures, or large‑scale data ingestion and processing.
  • Prior work with auditors, risk, or GRC teams, or building systems that support audits and regulatory requirements.

Why HubSpot

HubSpot engineers work in small, autonomous teams with a high degree of ownership over what they ship and how they run it in production. We deploy frequently, learn quickly from our customers, and invest heavily in engineering excellence and developer experience. In Security Automated Assurance, you’ll see a direct connection between the systems you build and HubSpot’s ability to earn and keep our customers’ trust at scale.


We know the confidence gap and impostor syndrome can get in the way of meeting spectacular candidates, so please don’t hesitate to apply — we’d love to hear from you.

If you need accommodations or assistance due to a disability, please reach out to us using this form.


At HubSpot, we value both flexibility and connection. Whether you’re a Remote employee or work from the Office, we want you to start your journey here by building strong connections with your team and peers. If you are joining our Engineering team, you will be required to attend a regional HubSpot office for in-person onboarding. If you join our broader Product team, you’ll also attend other in-person events, such as your Product Group Summit and other gatherings, to continue building on those connections.

If you require an accommodation due to travel limitations or other reasons, please inform your recruiter during the hiring process. We are committed to supporting candidates who may need alternative arrangements


Massachusetts Applicants: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Germany Applicants: (m/f/d) - link to HubSpot's Career Diversity page here.

India Applicants: link to HubSpot India's equal opportunity policy here.


About HubSpot

HubSpot (NYSE: HUBS) is an AI-powered customer platform with all the software, integrations, and resources customers need to connect marketing, sales, and service. HubSpot's connected platform enables businesses to grow faster by focusing on what matters most: customers. 

At HubSpot, bold is our baseline. Our employees around the globe move fast, stay customer-obsessed, and win together. Our culture is grounded in four commitments: Solve for the Customer, Be Bold, Learn Fast, Align, Adapt & Go!, and Deliver with HEART. These commitments shape how we work, lead, and grow.

We’re building a company where people can do their best work. We focus on brilliant work, not badge swipes. By combining clarity, ownership, and trust, we create space for big thinking and meaningful progress. And we know that when our employees grow, our customers do too.

Recognized globally for our award-winning culture by Comparably, Glassdoor, Fortune, and more, HubSpot is headquartered in Cambridge, MA, with employees and offices around the world.

Explore more:


HubSpot may use AI to help screen or assess candidates, but all hiring decisions are always human. More information can be found here. By submitting your application, you agree that HubSpot may collect your personal data for recruiting, global organization planning, and related purposes. We may use CLEAR ID Verification during the hiring process to confirm your identity and help maintain a safe, secure, and trusted experience for all candidates. Refer to HubSpot's Recruiting Privacy Notice for details on data processing and your rights.

What you'll do

1Own technical direction for privacy tooling and co-set product strategy as part of the TL/PM triad
2Lead delivery of complex projects across data privacy, PII management, and data protection domains
3Design and evolve distributed systems that scan codebases and infrastructure to detect PII usage at scale
4Own reliability, alerting, incident response, and continuous improvement of data privacy pipelines
5Collaborate with Privacy, Legal, and Security teams to translate regulations into robust technical solutions
6Mentor and coach engineers through design reviews, pairing, and thoughtful feedback
7Shape the roadmap for how HubSpot manages and protects personal data, balancing platform investments with regulatory needs
8Proactively maintain on-call health, code quality, and team reliability standards

Requirements

Senior backend engineering experience with proven ability to lead small teams, technical areas, or complex cross-team projects
Hands-on design and operation of distributed systems including microservices, message queues, and data pipelines in production
Strong proficiency in at least one JVM language (preferably Java) and relational databases such as MySQL
Deep commitment to reliability, observability, and operational excellence including on-call participation
Clear communication with both technical and non-technical stakeholders across privacy, legal, security, and product functions

Nice to have

Kafka
Event-Driven Architecture
Large-Scale Data Ingestion
SOX Compliance
ISO 27001
SOC Reports
Data Warehouse Integration
GRC Tools
Audit Support

Role overview

Role family
Software Engineering
Level
IC4 — backend
Experience
7–12 years
Type
Hybrid (IC + Management)
Remote policy
Hybrid
Visa sponsorship
Not offered

Tech stack analysis

LANGUAGES
JavaJVM
DATABASES
MySQL
INFRASTRUCTURE
KafkaMicroservicesMessage QueuesData PipelinesEvent-Driven Architecture
TOOLS
Alerting / Observability ToolingOn-Call Systems

Salary estimate

$190K – $250K
AI-estimated salary range
Confidence72%
Reasoning

HubSpot Technical Lead II (equivalent to Staff/Senior Staff SWE) in Cambridge, MA or remote US. Based on HubSpot's publicly available compensation data on Levels.fyi and Glassdoor, TL II roles at HubSpot typically range from $190K–$250K total compensation including base + bonus + RSUs. Security/privacy domain commands a slight premium. Confidence is moderate as HubSpot does not publish explicit salary bands in this posting.

See the AI-estimated salary range for this role

Sign up free →

Green flags

6 items
Explicitly states psychological safety with impostor syndrome mention, encouraging diverse candidates to applyculture

Discover all 6 green flags for this role

Sign up free →

Benefits breakdown

See all benefits organized by category — health, financial, time off & more

Sign up free →

Hiring insights

JD quality
8/10
Urgency
medium
Autonomy
high
Team size
small (2-5)

See JD quality score, hiring urgency & team details

Sign up free →

Red flags

PRO3 items
No salary range disclosed — for a senior lead role this reduces transparency and candidate trustcompensation

See all 3 red flags — what the JD isn't telling you

Sign up free →

Interview insights

PRO
Rounds
5
Duration
4 wks
Difficulty
hard
Take-home
Yes

Get full interview breakdown — rounds, likely topics & prep tips

Sign up free →

Career path

PRO
Next roles
Principal EngineerEngineering ManagerDirector of Engineering

See where this role leads — full career progression

Sign up free →
About the company

HubSpot is a leading CRM and inbound marketing platform powering over 228,000 businesses in 135+ countries. Its integrated suite of marketing, sales, customer service, and CMS tools helps companies attract, engage, and delight customers. HubSpot is known for its freemium model and strong developer ecosystem.

HQCambridge, MA, USA
Interview difficultyhard
Build vs Maintainboth
Cross-functionalYes