Senior Software Security Engineer, Developer Productivity

The worldwide data management software market is massive (IDC forecasts it to be $136 billion by 2027!). At MongoDB we are transforming industries and empowering developers to build amazing apps that people use every day. We are the leading developer data platform and the first database provider to IPO in over 20 years. Join our team and be at the forefront of innovation and creativity.

The MongoDB Developer Productivity team provides a highly leveraged foundation of shared tools and services that support our product development process. We succeed when MongoDB product and engineering teams are able to deliver the best solutions to our customers through a highly effective software development process.

As a Developer Productivity Security Engineer, you will be ensuring our software development infrastructure helps MongoDB developers successfully adhere to our security best practices and product compliance goals as well as helping ensure a secure software supply chain for MongoDB development as a whole. 

This role can be based out of any of our US offices or remotely in the US. 

The right candidate for this role

• Understands the challenges of software development at scale and is interested in developing tools and systems to improve the development experience
• Is passionate about learning modern Information Security and Cyber Security threats, mitigations and control frameworks
• Is inspired to identify areas of improvement with respect to better ways to educate and enable MongoDB developers with regards to secure software development
• Has excellent communication and collaboration skills for interacting with partners and stakeholders in requirements gathering, design, proof-of-concept demonstrations, implementation, and support
• Is skilled at learning new concepts and technologies rapidly, quickly transitioning to leadership and mentorship in these areas

Position Expectations

• Create, develop, and implement solutions to address security requirements for the development infrastructure of MongoDB products
• Develop and maintain security policies, procedures, and standards with a  diverse application/line of business partners
• Build and maintain CICD building blocks and shared libraries proactively for app and development teams to fast feedback loops related to security and compliance
• Troubleshoot, identify, and fix problems in the DevSecOps domain
• Ensure incident tracking tools are updated in accordance with established norms and processes, gather all essential data and document any discoveries and concerns
• Align with technological Systems/Software Development Life Cycle (SDLC) processes and industry-standard service management principles (such as ITIL)
• Be a proactive partner with Application Security and CorpSec Security teams

Technical Skills

This role involves the following:

• Proficiency in one or more scripting languages (Python, Shell, Ruby, etc.). Knowledge of secure coding practices and familiarity with common vulnerabilities and exploit techniques
• Comprehensive technical expertise in a variety of DevSecOps toolkits, including Ansible, Artifactory, Jira, Black Duck, Synk, Terraform, Sigstore toolchain, or comparable technologies
• Familiarity with API security, container security, and/or cloud policy, configuration, and security management tools
• Solid understanding of cybersecurity principles and frameworks such as NIST SSDF, SLSA, as well as practical experience in implementing them
• Experience supporting software development compliance against one or more of  PCI-DSS, HIPPA, SOX, GDPR, CCPA, and FedRAMP Standards and Policies
• Relevant certifications such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) can be beneficial but are not required

To drive the personal growth and business impact of our employees, we’re committed to developing a supportive and enriching culture for everyone. From employee affinity groups, to fertility assistance and a generous parental leave policy, we value our employees’ wellbeing and want to support them along every step of their professional and personal journeys. Learn more about what it’s like to work at MongoDB, and help us make an impact on the world!

MongoDB is committed to providing any necessary accommodations for individuals with disabilities within our application and interview process. To request an accommodation due to a disability, please inform your recruiter.

MongoDB, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type and makes all hiring decisions without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.