Senior Product Security Engineer, Cloud

MongoDB’s mission is to empower innovators to create, transform, and disrupt industries by unleashing the power of software and data. We enable organizations of all sizes to easily build, scale, and run modern applications by helping them modernize legacy workloads, embrace innovation, and unleash AI. Our industry-leading developer data platform, MongoDB Atlas, is the only globally distributed, multi-cloud database and is available in more than 115 regions across AWS, Google Cloud, and Microsoft Azure. Atlas allows customers to build and run applications anywhere—on premises, or across cloud providers. With offices worldwide and over 175,000 new developers signing up to use MongoDB every month, it’s no wonder that leading organizations, like Samsung and Toyota, trust MongoDB to build next-generation, AI-powered applications.

Want to secure the future of data management and AI/ML?  At MongoDB we are transforming industries and empowering developers to build amazing AI/ML-powered apps that people and enterprises use every day. We are the leading modern data platform and the first database provider to IPO in over 20 years. Overall, the worldwide data management software market is massive (IDC forecasts it to be $138 billion by 2026!). Join our team and be at the forefront of innovation and creativity.

This role can be based out of our New York City or Seattle offices or remotely in the United States.

Who You Are

With a strong security engineering background, you’re looking for a role that gives you the freedom to increase MongoDB’s resonance with customers by strengthening our products. You’re passionate about solving hard security engineering problems while putting a strong emphasis on customer experience, leveraging your own significant experience. You enjoy collaborating with different teams to innovate and implement pragmatic solutions.

Who We Are

The MongoDB Security organization is a diverse collection of individuals working together to scale MongoDB’s security, both security of the products themselves and the security features we offer to customers. The team is responsible for several products including the MongoDB Atlas Cloud, Ops Manager, Kubernetes Operator, and the MongoDB Server (Community and Enterprise editions).

The MongoDB Security organization works with software engineers to design, implement, and operate systems in a manner that protects customer and MongoDB data. It is a multidisciplinary organization that covers product, software, cloud, infrastructure, and operational security concerns.  Our organization…

• Defines and drives an engaging, exciting security strategy for MongoDB and our customers
• Builds a developer driven security program where there is tight integration with engineering artifacts, process, and tooling
• Uses software architecture and coding patterns to reduce the impact of security issues
• Are the security subject matter experts for our tech stack and products

The ideal candidate will have...

• At least 7 years of Cloud Security experience
• Deep subject matter expertise in modern cloud environments, particularly in large scale AWS, GCP and Azure multi-cloud environments
• Deep understanding of IAM, audit logging, network security, and data protection mechanisms within AWS, GCP, and Azure
• Demonstrated experience working with native(e.g., AWS Security Hub, GCP Command Center) and non-native tooling (e.g., Orca, Wiz) for Cloud Security Posture Management 
• Scripting experience and ability to contribute code back to our environments
• Comfortable leading threat modeling, security architecture reviews,  and being a security ambassador to other engineering teams
• Communicate complex technical issues in a simple manner that builds trust with a variety of audiences
• A strong sense of ownership and delivery
• Can facilitate a conversation rather than dominate it
• Skilled at providing collaborative, actionable feedback, not just a list of flaws

Nice to Haves

• Kubernetes and container security experience (e.g., securing workloads on EKS, GKE, or OpenShift)
• Experience with security incident response in cloud-native environments
• Background in leveraging machine learning or AI techniques for cloud security threat detection or anomaly detection

In this role, you will...

• You will take ownership, define strategy, and drive improvement for various aspects of our program, including security assessments, thre