Staff Security Engineer, Developer Productivity

View full description

Requirements:

• 8+ years of experience with application security testing and analysis tools.
• Relevant software development experience to understand how software is designed and built.
• Expertise in the software development lifecycle and supply chain.
• Experience with threat modeling, risk analysis, and control design.
• Advanced understanding of vulnerability exploitation and remediation.
• Familiarity with programming languages such as C++, C, Rust, Go, Python, Java.
• Experience with cloud native development pipelines and tools like Docker and Kubernetes.
• Ability to work independently and identify solutions.
• Demonstrated collaborative skills with senior engineering leaders.

Responsibilities:

• Collaborate with MongoDB Infosec and application security teams to create a threat matrix focused on SDLC processes.
• Provide architectural guidance and implement security tooling and controls across developer pipelines.
• Drive SDLC compliance through implementation and automation of controls.
• Work with engineering teams to build scalable security solutions.
• Engage in security investigations and analyze emerging threats.
• Develop strategies to enhance SDLC security posture.
• Serve as a technical authority and manage large-scale security projects.
• Stay updated on software security trends and compliance requirements.
• Collaborate with Legal, Privacy, and Internal Audit for compliance.