Senior Product Security Engineer – AI-Driven PenTest Lead

MongoDB Inc.; United States; On-site; USD 126,000 - 248,000; Full time

Benefits offered by this job

Equity

Employee stock purchase program

Flexible PTO

Parental leave

Fertility and adoption assistance

401(k) plan

Mental health counseling

Inclusive health insurance

Job summary

MongoDB is seeking a seasoned security professional to advance product security through advanced threat modeling, code analysis, and hands-on penetration testing across MongoDB Atlas Cloud, Ops Manager, Kubernetes Operator, and MongoDB Server.

You will drive AI-assisted assessment workflows, collaborate with engineers to remediate vulnerabilities, and mentor the security team as MongoDB grows its protection for customers globally.

Qualifications

• 7+ years in application security, product security or penetration testing.
• Threat modeling, penetration testing, red teaming, and secure code reviews.
• Programming/scripting in Python or Golang.
• Experience with AWS, GCP, Azure.
• Ability to communicate findings to technical and non-technical audiences.

Responsibilities

• Lead evolution of internal security and assessment processes using AI-based analysis.
• Perform deep-dive penetration tests and security assessments of MongoDB products.
• Research new attack vectors and strengthen defensive measures.
• Collaborate with engineering teams to remediate vulnerabilities and advocate security best practices.
• Recommend secure coding patterns, container security, and secrets management.

Skills

Threat modeling

Penetration testing

Red teaming

Secure code reviews

Python

Golang

Cloud platforms (AWS, GCP, Azure)

Kubernetes

Docker

Communication of findings

Tools

Kubernetes

Docker

Job description

MongoDB is seeking a seasoned security professional to advance product security through advanced threat modeling, code analysis, and hands-on penetration testing across MongoDB Atlas Cloud, Ops Manager, Kubernetes Operator, and MongoDB Server.

You will drive AI-assisted assessment workflows, collaborate with engineers to remediate vulnerabilities, and mentor the security team as MongoDB grows its protection for customers globally.