Staff Security Engineer, Developer Productivity

View full description

Requirements:

• 8+ years of experience with application security testing and analysis tools.
• Relevant software development experience with knowledge of how software is built.
• Subject matter expertise in all phases of the software development lifecycle.
• Domain expertise in software and security best practices.
• Experience with threat modeling, risk analysis, and control design.
• Advanced understanding of vulnerability exploitation and remediation.
• Experience with languages such as C++, C, Rust, Go, Python, Java.
• Familiarity with cloud-native development pipelines and tooling (Docker, Kubernetes).
• Ability to work autonomously and create solutions independently.
• Ability to work collaboratively across teams.

Responsibilities:

• Collaborate with MongoDB Infosec and application security teams to create a threat matrix for SDLC processes.
• Provide architectural guidance and implement security tooling across developer pipelines and services.
• Drive SDLC compliance with engineering efforts and automation of processes.
• Engage in security investigations for emerging threats.
• Develop strategies to enhance SDLC security posture using red team and pen test activities.
• Act as a technical authority aligned with MongoDB’s security initiatives.
• Stay updated on software security industry trends.
• Work with Legal, Privacy and Internal Audit for compliance.