Security Software Engineer (Infrastructure Security)

MongoDB Inc.; New York (NY); On-site; USD 180,000 - 240,000; Full time

Job summary

MongoDB Inc. is seeking a highly experienced security-oriented SRE/Infrastructure Principal to integrate security into platform runtimes, CI/CD, and IaC. You will drive guardrails, automate CSPM and workload identity, and scale secure cloud workloads across multi-cloud environments.

You will own security platforms, contribute to threat modeling, and lead architectural design, implementation, rollout, and long-term reliability across Atlas-scale deployments.

Qualifications

• 10+ years in SRE, Infrastructure Engineering, or Cloud Security Engineering.
• Hands-on experience with Terraform, CloudFormation, or Ansible for automated provisioning.
• Proven ability to own infrastructure in Linux, Kubernetes, and multiple cloud providers (AWS/GCP/Azure).
• Production exposure to low-level Linux security mechanisms (seccomp, AppArmor, SELinux, cgroups).

Responsibilities

• Define technical direction and resolve cross-team ambiguity at Staff/Principal scope.
• Write production-quality code and use IaC to version, test, and deploy security controls.
• Build real-time security monitoring, logging, and alerting at Atlas scale.
• Lead end-to-end initiatives from threat modeling to rollout and reliability.

Skills

Go

Python

C

C++

Rust

Linux

Kubernetes

Cloud security

Tools

Terraform

CloudFormation

Ansible

Cilium

Falco

Tetragon

Gatekeeper

Docker

Job description

Responsibilities

• InfraSec operates on a preventative, enabling model: rather than acting as a manual approval gatekeeper or compliance auditor, we develop automated guardrails and platform capabilities
• We integrate security directly into the platform runtime, CI/CD, and Infrastructure-as-Code (IaC) workflows so engineering teams can operate securely at scale without friction
• Harden hosts and containerized workloads using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups) and eBPF-based tooling (Cilium, Tetragon)
• Secure containerized infrastructure across multi-cloud environments via RBAC, network policies, admission controls (Gatekeeper), and runtime threat detection
• Build and manage automated services for Cloud Security Posture Management (CSPM), workload identity, vulnerability management, and access controls across AWS, Azure, and GCP
• Write production-quality code and leverage Infrastructure-as-Code (Terraform) to version, test, and deploy security controls as code
• Build real-time security monitoring, logging, and alerting systems to detect anomalies and track security posture at Atlas scale
• Lead initiatives across their full lifecycle; from threat modeling and architectural design to implementation, rollout, and long-term production reliability

Requirements

• A track record of operating at Staff or Principal scope: defining technical direction, resolving cross-team ambiguity, and personally championing initiatives from conception to deliveryHands-on experience using Terraform, CloudFormation, or Ansible for automated infrastructure provisioningStrong coding skills in Go (Golang), Python, C, C++, or RustDemonstrated experience owning infrastructure in Linux, Kubernetes, and at least one major cloud provider (AWS, GCP, or Azure)Proven track record of building and operating large-scale distributed systems or cloud platform infrastructure10+ years in SRE, Infrastructure Engineering, or Cloud Security EngineeringProduction exposure to low-level Linux security mechanisms (seccomp, AppArmor, SELinux, cgroups)Direct ownership of Cloud Security and Workload Identity platformsMulti-cloud expertise spanning AWS, Azure, and GCPPractical experience with eBPF-based security tooling (Cilium, Falco, Tetragon)