Senior Software Engineer (Product Security)
Posted
- The MongoDB Product Security team is looking for a full-stack senior software engineer to help us build and scale the next generation of security practices, enabling hundreds of MongoDB engineers to build secure products for our customers
- The Product Security team empowers product teams to build secure products for MongoDB customers by providing security enablement, such as AI-powered code analysis, threat modeling and security finding triaging and verification, fuzzing infrastructure, and finding management solutions
- Our goal is to incorporate security early in product development at scale without introducing friction
- With the emerging capabilities of AI models, we are proactively adopting our security practices to be prepared for the newly introduced challenges
- This role is expected to work with a distributed team that covers all time zones in the US
- Deliver features for an automated code analysis platform
- Expand security findings triaging and verification platform to all products across MongoDB
- Automate finding management process to be self-serve for engineering teams
- Centralized security signal analytics platform to help teams focus on the most important security work
- Design and build tooling solutions to shift security practices left in SDLC
- Strong verbal and written technical communication skills
- 5+ years of experience of production-level software development with Python and TypeScript in a cloud environment
- A proven track record of identifying problems, implementing solutions and delivering complex projects
- The ability to independently prioritize and execute tasks after alignment with the team and stakeholders
- Experience managing the end-to-end development lifecycle, including building, deploying and operating software at scale
- Deep understanding of CI/CD systems, including linting, testing and various deployment strategies
- Experience in micro-services, Kubernetes, and containers
- Strong Understanding of building AI agents
- Basic knowledge of what security practices are and how they work, such as threat modeling, secure code review, and CVE
- Experience with NoSQL or database development
- Experience designing and operating systems that execute untrusted code safely — container/sandbox isolation, least-privilege credential handling, and network egress controls
- Familiarity with C++ or Rust