Description
Job Overview
We are seeking a Senior Software Engineer (SRE), Infrastructure Security to join our Infrastructure Security (InfraSec) team within Site Reliability Engineering (SRE) at MongoDB. This role can be based in our New York City office or remote in the eastern or central timezone.
Responsibilities
- Hardening hosts and containerized workloads using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups) and eBPF-based tooling (Cilium, Tetragon)
- Securing containerized infrastructure across multi-cloud environments via RBAC, network policies, admission controls (Gatekeeper), and runtime threat detection
- Building and managing automated services for Cloud Security Posture Management (CSPM), workload identity, vulnerability management, and access controls across AWS, Azure, and GCP
- Writing production-quality code and leveraging Infrastructure-as-Code (Terraform) to version, test, and deploy security controls as code
- Building real-time security monitoring, logging, and alerting systems to detect anomalies and track security posture at Atlas scale
- Leading initiatives across their full lifecycle; from threat modeling and architectural design to implementation, rollout, and long-term production reliability
Requirements
- 5+ years in SRE, Infrastructure Engineering, or Cloud Security Engineering
- Strong coding skills in Go (Golang), Python, C, C++, or Rust
- Proven track record of building and operating large-scale distributed systems or cloud platform infrastructure
- Hands-on experience using Terraform, CloudFormation, or Ansible for automated infrastructure provisioning
- Demonstrated experience owning infrastructure in Linux, Kubernetes, and at least one major cloud provider (AWS, GCP, or Azure)
Preferred Qualifications
- Practical experience with eBPF-based security tooling (Cilium, Falco, Tetragon)
- Direct ownership of Cloud Security and Workload Identity platforms
- Multi-cloud expertise spanning AWS, Azure, and GCP
- Production exposure to low-level Linux security mechanisms (seccomp, AppArmor, SELinux, cgroups)