Security Software Engineer, Infrastructure Security (Staff or Senior)
Designs and builds scalable security controls and services for MongoDB Atlas multi-cloud infrastructure using Linux mechanisms, Kubernetes, and eBPF. Requires 5+ years experience in software/SRE with security focus, proficiency in systems programming, and cloud platforms.
About the job
Responsibilities
- Design and build core security primitives and services that protect MongoDB Atlas compute, networking, and identity across AWS, Azure, and GCP
- Build secure-by-default infrastructure using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups), Kubernetes, and eBPF to enforce runtime policies and gain deep visibility into systems behaviour
- Develop APIs, automation, and tooling that manage security posture at scale (CSPM, vulnerability management, workload identity) and provide monitoring, logging, and alerting pipelines that integrate with our tooling (Grafana, Splunk, Victoria Metrics)
- Integrate security into our CI/CD and infrastructure-as-code workflows (Terraform) so that security controls are versioned, reviewed, and deployed just like any other code
- Lead complex projects end-to-end, from problem discovery and design docs to implementation, rollout, and long-term ownership
- Collaborate with SRE, platform and product engineering teams to define secure architectures for new infrastructure and services
Qualifications
- 5+ years of experience in Software Engineering, Site Reliability Engineering, or similar roles, preferably with relevant security work
- Proficiency with at least one programming language (Java, Golang, Rust, Python, or C/C++) and experience with infrastructure-as-code tools (Terraform) to automate security configurations and processes
- A deep understanding of Linux and networking concepts, including low-level fundamentals, and how they work together in complex systems
- Experience building security-related features or platforms such as runtime monitoring, CSPM, or vulnerability management
- Experience with a cloud provider (AWS, GCP, or Azure) and their security best practices and building blocks
- Hands-on experience with Kubernetes and its security ecosystem (e.g. RBAC, OPA/Gatekeeper, Kyverno, eBPF, Falco, Tetragon)
- A systems mindset: you think about failure modes, performance, observability, and operability alongside security and correctness
- Strong communication skills and the ability to explain complex security concepts and tradeoffs to both technical and non-technical stakeholders
Skills
Kubernetes, Terraform, Linux, Ebpf, AWS, GCP, Azure, Go, Rust, Python, Java, C/C++, Apparmor, Selinux, Seccomp
Similar jobs
Security Engineering jobs
Shield AI
Washington, DC
The Staff Information Systems Security Officer will secure and accredit classified information systems by implementing RMF and NIST controls, managing vulnerabilities, supporting audits and incident response, and overseeing Cross Domain Solutions. The role requires 8 years of classified-environment cybersecurity experience and expertise in DoD and IC requirements.
Twilio
United States
Leads cloud security detection and response engineering, building AI-enabled agents, threat-hunting capabilities, and automated security tooling. Requires deep security expertise, cloud experience, and strong knowledge of SIEM, SOAR, infrastructure as code, and AI threat frameworks.
Twilio
United States
Leads enterprise AI security architecture and develops security systems, automation, and agentic AI identity strategies at scale. Requires 7+ years in security or infrastructure security, enterprise technical leadership, cloud and container security expertise, and strong programming skills.
Okta
Bellevue, WAOwn the architecture and automation of enterprise identity governance, privileged access, and identity security posture programs. The role requires advanced IGA/PAM experience, production RBAC and lifecycle expertise, and the ability to lead technical direction and communicate with executives.
Okta
Bellevue, WAStaff Identity Engineer serving as a technical authority for enterprise IAM, owning Okta architecture, cloud identity guardrails, automation, and AI identity security. Requires deep Okta and authentication-protocol expertise, multi-cloud experience, and technical leadership.