Senior Software Engineer (Product Security)

Join MongoDB's Product Security team as a Senior Software Engineer. In this role, you will help build and scale security practices, enabling hundreds of engineers to create secure products for our customers. You will work with a distributed team, delivering features for an automated code analysis platform, expanding security findings triaging and verification, and automating the finding management process. You should have 5+ years of experience in production-level software development, a deep understanding of CI/CD systems, and experience with micro-services, Kubernetes, and containers.

Responsibilities

• Deliver features for an automated code analysis platform and expand security findings triaging and verification platform.
• Automate finding management process to be self-serve for engineering teams and design and build tooling solutions to shift security practices left in SDLC.

Requirements

• Work with a distributed team to incorporate security early in product development at scale without introducing friction.

Strong verbal and written technical communication skills

• 5+ years of experience of production-level software development with Python and TypeScript in a cloud environment
• A proven track record of identifying problems, implementing solutions and delivering complex projects
• The ability to independently prioritize and execute tasks after alignment with the team and stakeholders
• Experience managing the end-to-end development lifecycle, including building, deploying and operating software at scale
• Deep understanding of CI/CD systems, including linting, testing and various deployment strategies
• Experience in micro-services, Kubernetes, and containers
• Strong Understanding of building AI agents
• Basic knowledge of what security practices are and how they work, such as threat modeling, secure code review, and CVE
• Experience with NoSQL or database development
• Experience designing and operating systems that execute untrusted code safely — container/sandbox isolation, least-privilege credential handling, and network egress controls

Preferred

• Familiarity with C++ or Rust