Description
The MongoDB Product Security team is looking for a full-stack senior software engineer to help build and scale the next generation of security practices.
The Product Security team empowers product teams to build secure products for MongoDB customers by providing security enablement, such as AI-powered code analysis, threat modeling and security finding triaging and verification, fuzzing infrastructure, and finding management solutions.
Responsibilities:
- Deliver features for an automated code analysis platform
- Expand security findings triaging and verification platform to all products across MongoDB
- Automate finding management process to be self-serve for engineering teams
- Centralized security signal analytics platform to help teams focus on the most important security work
- Design and build tooling solutions to shift security practices left in SDLC
Baseline Qualifications:
- 5+ years of experience of production-level software development with Python and TypeScript in a cloud environment
- Experience managing the end-to-end development lifecycle, including building, deploying and operating software at scale
- Experience in micro-services, Kubernetes, and containers
- Deep understanding of CI/CD systems, including linting, testing and various deployment strategies
- The ability to independently prioritize and execute tasks after alignment with the team and stakeholders
- A proven track record of identifying problems, implementing solutions and delivering complex projects
- Strong Understanding of building AI agents
- Strong verbal and written technical communication skills
Preferred Qualifications:
- Basic knowledge of what security practices are and how they work, such as threat modeling, secure code review, and CVE
- Familiarity with C++ or Rust
- Experience designing and operating systems that execute untrusted code safely , container/sandbox isolation, least-privilege credential handling, and network egress controls.
- Experience with NoSQL or database development