Security Software Engineer, Infrastructure Security
Build scalable security controls and services for MongoDB Atlas multi-cloud infrastructure, spanning runtime protection, cloud security posture, identity, observability, and secure infrastructure automation. The role requires 5+ years of software or SRE experience, strong Linux and networking fundamentals, cloud expertise, and Kubernetes security experience.
About the job
Responsibilities
- Design and build core security primitives and services that protect MongoDB Atlas compute, networking, and identity across AWS, Azure, and Google Cloud.
- Build secure-by-default infrastructure using Linux security mechanisms including AppArmor, SELinux, seccomp, cgroups, Kubernetes, and eBPF to enforce runtime policies and provide deep system visibility.
- Develop APIs, automation, and tooling to manage security posture at scale, including CSPM, vulnerability management, and workload identity.
- Provide monitoring, logging, and alerting pipelines integrating with Grafana, Splunk, and VictoriaMetrics.
- Integrate security into CI/CD and infrastructure-as-code workflows using Terraform so controls are versioned, reviewed, and deployed like other code.
- Lead complex projects end-to-end, from discovery and design through implementation, rollout, and long-term ownership.
- Collaborate with SRE, platform, and product engineering teams to define secure architectures for infrastructure and services.
Requirements
- 5+ years of experience in software engineering, site reliability engineering, or similar roles, preferably with relevant security work.
- Proficiency in at least one programming language: Java, Go, Rust, Python, C, or C++.
- Experience with Terraform and infrastructure-as-code automation.
- Deep understanding of Linux and networking concepts, including low-level fundamentals.
- Experience building security-related features or platforms such as runtime monitoring, CSPM, or vulnerability management.
- Experience with AWS, Google Cloud, or Azure and their security best practices and building blocks.
- Hands-on experience with Kubernetes and its security ecosystem.
- Systems mindset covering failure modes, performance, observability, operability, security, and correctness.
- Strong communication skills and ability to explain complex security concepts and tradeoffs to technical and non-technical stakeholders.
Nice-to-haves
- Experience with Kubernetes security tools and frameworks such as RBAC, OPA/Gatekeeper, Kyverno, eBPF, Falco, or Tetragon.
Compensation and Benefits
- MongoDB provides a supportive and enriching culture focused on employee growth and business impact.
- Benefits include employee affinity groups, fertility assistance, and generous parental leave.
Skills
AWS, Azure, GCP, Linux, Kubernetes, Terraform, Ebpf, Apparmor, Selinux, Seccomp, Cgroups, Python, Java, Go, Rust
Similar jobs
Security Engineering jobs
Stripe
Dublin, Ireland
Investigates high-risk accounts and leads incident response for fraud and product-abuse events, using behavioral analysis and threat intelligence to identify root causes and improve detection. Requires 3+ years of incident response and fraud-data analysis experience, plus strong Python and SQL skills.
Stripe
Seattle, WAInvestigates and leads response to high-risk fraud and product-abuse incidents, analyzes threat patterns, and drives root-cause and prevention improvements. Requires 3+ years of incident response and fraud-oriented data analysis, plus Python, SQL, and security investigation expertise.
Supabase
Remote
Secures Supabase’s cloud platform, Kubernetes environments, containers, and infrastructure by conducting risk assessments, strengthening controls, and building scalable security guardrails. Requires senior-level platform or cloud security experience with deep AWS, Kubernetes, container, and Linux expertise.
Kodex
Sydney, Australia
The Threat Intelligence Specialist investigates identity fraud and threat actors, conducts pivot-based OSINT, and collaborates with law enforcement agencies across EMEA. The role requires at least three years of relevant analytical experience, strong communication skills, and the ability to work autonomously across time zones.
Twilio
United KingdomLeads technical response to security events across cloud infrastructure, services, and applications, covering triage, containment, remediation, automation, and post-incident improvements. Requires 3+ years of cloud security incident response experience and expertise with SIEM, SOAR, and major cloud platforms.