Senior Product Security Engineer - AI-Driven Threat Modeling

MongoDB Inc.; New York (NY); On-site; USD 126,000 - 248,000; Full time

Benefits offered by this job

Equity and stock purchase program

Flexible paid time off

Parental leave (20 weeks)

Job summary

MongoDB, Inc. seeks a seasoned security professional to lead penetration testing and threat modeling across MongoDB Atlas, Ops Manager, Kubernetes Operator, and the MongoDB Server.

You will drive AI-based assessment workflows and collaborate across teams to improve product security and customer trust. The role requires 7+ years in security testing, strong communication, and hands-on experience with cloud providers, Docker, and Kubernetes.

Qualifications

• 7+ years of experience in application security or penetration testing.
• Expertise in threat modeling and security assessments.
• Experience with cloud providers (AWS, GCP, Azure).
• Ability to communicate findings to both technical and non-technical audiences.

Responsibilities

• Lead evolution of internal security and assessment processes using AI-based analysis.
• Perform deep-dive penetration tests and threat modeling for MongoDB products.
• Prototype and execute new attack vectors and defensive measures.
• Collaborate with engineering teams to remediate vulnerabilities.
• Recommend secure coding patterns and container security measures.
• Coordinate with red team and detection to address incidents.

Skills

Penetration testing

Threat modeling

Red teaming

Secure code reviews

Python

Golang

Cloud platforms

Kubernetes

Docker

Security tooling

Tools

Kubernetes

Docker

Job description

MongoDB, Inc. seeks a seasoned security professional to lead penetration testing and threat modeling across MongoDB Atlas, Ops Manager, Kubernetes Operator, and the MongoDB Server.

You will drive AI-based assessment workflows and collaborate across teams to improve product security and customer trust. The role requires 7+ years in security testing, strong communication, and hands-on experience with cloud providers, Docker, and Kubernetes.