Description
MongoDB is looking for a Senior InfoSec Analyst to join its Computer Security Incident Response Team. The successful candidate will detect, investigate, and respond to security events across corporate and cloud environments.
Responsibilities:
- Lead investigations from triage through containment, scoping, remediation, and postmortem for security events
- Analyze logs, endpoint telemetry, and cloud and SaaS audit data to distinguish true positives from false positives and reconstruct attacker or user activity timelines
- Investigate credential and secret exposure, endpoint detections, phishing, data exposure, and policy violations such as unauthorized tool or AI usage
- Automate repetitive response work using scripting and APIs, including enrichment, ticketing, and notification workflows
- Maintain runbooks, playbooks, and severity and escalation standards
- Contribute to employee-facing security guidance and awareness
- Mentor junior analysts and help raise the team's investigative and communication standards
Requirements:
- 5+ years in security operations, incident response, detection engineering, or a related field
- Hands-on experience leading incidents end to end, including clear stakeholder communication during and after an event
- Strong log analysis skills in a SIEM and fluency with EDR tools
- Working knowledge of cloud security (AWS, GCP, or Azure), identity and access management, and SaaS security
- Solid understanding of attacker techniques and frameworks such as MITRE ATT&CK
- Ability to prioritize and make sound decisions under ambiguity and time pressure
- Strong written communication, including incident reports and executive-ready summaries
Nice to Have:
- Experience integrating LLM or AI tooling into security workflows, or assessing AI-related risk
- Familiarity with incident management platforms and Jira-based workflows
- Relevant certifications (GCIH, GCFA, GCIA, CISSP, or similar)
- Bachelor's degree in a related field or equivalent experience