InfoSec Engineer I

Social network you want to login/join with:

MongoDB’s mission is to empower innovators to create, transform, and disrupt industries by unleashing the power of software and data. We enable organizations of all sizes to easily build, scale, and run modern applications by helping them modernize legacy workloads, embrace innovation, and unleash AI. Our industry-leading developer data platform, MongoDB Atlas, is the only globally distributed, multi-cloud database and is available in more than 115 regions across AWS, Google Cloud, and Microsoft Azure. Atlas allows customers to build anywhere—on the edge, on premises, or across cloud providers. With offices worldwide and over 175,000 developers joining MongoDB every month, it’s no wonder that leading organizations, like Samsung and Toyota, trust MongoDB to build next-generation, AI-powered applications.

Team:

MongoDB is seeking a passionate Security Engineer to help expand MongoDB’s Information Security Program, specifically focusing on Corporate SaaS Security.

The MongoDB Security Team is responsible for the Information Security Program for MongoDB Inc; helping to reduce risk in our systems, company and to help establish trust in our product offerings and cloud services. Our customers are both our internal MongoDB employees and our external customers.

This is an exciting chance to be part of a dynamic and innovative team with a lot of opportunities to grow. MongoDB prides itself on offering careers rather than jobs.

We are looking to speak to candidates who are based in London for our hybrid working model, or remote within the UK.

Role Description:

MongoDB is looking for an experienced professional to join our security team. The ideal candidate will have at least 2 years+ of experience in Information/Cyber Security.

The primary focus of this role will be ensuring that 3rd party Corporate SaaS applications used by MongoDB are configured and managed securely. This will include developing novel approaches and tools for SaaS security (like SOAR), utilizing industry best practices, and responding to security incidents.

3rd party SaaS applications in this context can be defined as “productivity” and “corporate” SaaS platforms used by hundreds or thousands of MongoDB employees. This role will not be specifically focused on IaaS / PaaS tools like Amazon, GCP, Azure - although some overlap is possible and necessary.

Candidate Profile:

Candidates should be fluent in a variety of information security tools, including some Cloud-based technologies. Experience in application pentesting, security reviews, and awareness of different SaaS platforms is desirable.

Candidates need to be willing to undergo additional training to learn more about different SaaS platforms’ specifics.

We seek proactive individuals who can present ideas effectively and demonstrate problem-solving skills.

Strong multitasking and communication skills are essential.

The ideal candidate will have:

• Minimum 3 years hands-on experience in cybersecurity
• Success in completing complex projects
• Familiarity with SaaS technologies like Salesforce, Google Workspace
• Familiarity with IaaS/PaaS technologies like AWS, GCP
• Experience with SaaS management tools like CASB, SSPM is a plus
• Ability to create scripts and automate processes using REST APIs
• Proficiency in various security technologies
• Problem-solving capabilities
• Strong collaboration skills with technical and non-technical teams
• Experience with SIEM platforms like Splunk
• Some experience with application architecture reviews
• Pentesting experience or awareness is preferred
• Willingness to work with diverse technical teams on solutions
• Basic understanding of security standards like SOC2, HIPAA, Fedramp

Position Expectations:

• Quickly understand and assess new technologies
• Willingness to learn and adapt in a fast-paced environment
• Interest in SaaS security
• Ability to work with distributed teams and multitask
• Communicate threats, risks, and recommendations effectively
• Organize and coordinate in global/regional contexts
• Educate engineers and application owners on SaaS security risks
• Learn new systems and architectures rapidly
• Collaborate on process improvements and documentation
• Address configuration drift through process creation

Success Measures:

The candidate will be successful when they can:

• Collaborate with engineers to secure products
• Manage multiple efforts with a risk-based approach
• Communicate recommendations clearly
• Research security approaches and techniques
• Find simple, creative solutions to complex problems

This role is vital to maturing our Security Program and offers significant growth potential. It is based in London, Blackfriars, and reports to the Manager of SaaS Security, EMEA.

Company:

MongoDB is a leading modern database platform, enabling data and software innovation. MongoDB Atlas is a multi-cloud database service available in over 50 regions across AWS, Azure, and GCP.