Infrastructure Security Engineer | MongoDB InfraSec | NYC

MongoDB’s Infrastructure Security (InfraSec) team sits within Site Reliability Engineering (SRE) in the CTO organization. It builds the security infrastructure, primitives, and reusable controls that protect MongoDB Atlas across AWS, Azure, and Google Cloud. InfraSec works on a preventative, enabling model: rather than acting as a manual approval gatekeeper or compliance auditor, it develops automated guardrails and platform capabilities. Security is integrated directly into the platform runtime, CI/CD, and Infrastructure-as-Code (IaC) workflows, so engineering teams can operate securely at scale without friction.

Key Responsibilities

• Harden hosts and containerized workloads using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups) and eBPF-based tooling (Cilium, Tetragon)
• Secure containerized infrastructure across multi-cloud environments with RBAC, network policies, admission controls (Gatekeeper), and runtime threat detection
• Build and manage automated services for Cloud Security Posture Management (CSPM), workload identity, vulnerability management, and access controls across AWS, Azure, and GCP
• Write production-quality code and use Terraform to version, test, and deploy security controls as code
• Build real-time security monitoring, logging, and alerting systems to detect anomalies and track security posture at Atlas scale
• Lead initiatives across their full lifecycle, from threat modeling and architectural design to implementation, rollout, and long-term production reliability

Requirements

• 5+ years in SRE, infrastructure engineering, or cloud security engineering
• Strong coding skills in Go, Python, C, C++, or Rust
• Proven track record of building and operating large-scale distributed systems or cloud platform infrastructure
• Hands-on experience with Terraform, CloudFormation, or Ansible for automated infrastructure provisioning
• Demonstrated experience owning infrastructure in Linux, Kubernetes, and at least one major cloud provider (AWS, GCP, or Azure)
• Education: Not specified

Skills

Technical Skills

• Go, Python, C, C++, or Rust
• Terraform, CloudFormation, or Ansible
• Linux, Kubernetes, and multi-cloud (AWS, GCP, Azure)
• Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups)
• Cloud Security Posture Management, workload identity, and vulnerability management
• Security monitoring, logging, and alerting

Soft Skills

• Ownership of initiatives from threat modeling through production
• Building automated, developer-friendly guardrails
• Collaboration with engineering teams

Nice to Have

• Practical experience with eBPF-based security tooling (Cilium, Falco, Tetragon)
• Direct ownership of Cloud Security and Workload Identity platforms
• Multi-cloud expertise spanning AWS, Azure, and GCP
• Production exposure to low-level Linux security mechanisms (seccomp, AppArmor, SELinux, cgroups)

Benefits

Benefits for eligible U.S.-based employees may include:

• Equity and an employee stock purchase program
• Flexible paid time off
• 20 weeks of fully paid, gender-neutral parental leave
• Fertility and adoption assistance
• 401(k) plan
• Mental health counseling
• Transgender-inclusive health insurance coverage and other health benefits