mongodb
Security Software Engineer, Infrastructure Security (Staff or Senior)
At a Glance
- Location
- Austin Boston Chicago New York City Pittsburgh Raleigh United States Washington DC
- Experience
- 5+ years
- Department
- D23050-PTO Site Reliability Engineering
- Posted
- 2026-02-19T13:13:46-05:00
Key Requirements
Required Skills
Domain Knowledge
- Engineering
- Insurance
Benefits & Perks
ansgender-inclusive health insurance coverage, and health benefits offerings
Requirements
You might be a great fit if you match some of the following:
5+ years of experience in Software Engineering, Site Reliability Engineering, or similar roles, preferably with relevant security work.
Proficiency with at least one programming language (Java, Golang, Rust, Python, or C/C++) and experience with infrastructure-as-code tools (Terraform) to automate security configurations and processes.
A deep understanding of Linux and networking concepts, including low-level fundamentals, and how they work together in complex systems.
Experience building security-related features or platforms such as runtime monitoring, CSPM, or vulnerability management.
Experience with a cloud provider (AWS, GCP, or Azure) and their security best practices and building blocks.
Responsibilities
Design and build core security primitives and services that protect MongoDB Atlas compute, networking, and identity across AWS, Azure, and GCP.
Build secure-by-default infrastructure using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups), Kubernetes, and eBPF to enforce runtime policies and gain deep visibility into systems behaviour.
Develop APIs, automation, and tooling that manage security posture at scale (CSPM, vulnerability management, workload identity) and provide monitoring, logging, and alerting pipelines that integrate with our tooling (Grafana, Splunk, Victoria Metrics.)
Integrate security into our CI/CD and infrastructure-as-code workflows (Terraform) so that security controls are versioned, reviewed, and deployed just like any other code.
Lead complex projects end‑to‑end, from problem discovery and design docs to implementation, rollout, and long‑term ownership.
Collaborate with SRE, platform and product engineering teams to define secure architectures for new infrastructure and services.