Senior Security Engineer - InfraSec & Multi-Cloud

At MongoDB, we are building the future of data platforms with MongoDB Atlas—our fully managed, multi-cloud database service. The Infrastructure Security (InfraSec) team sits within Site Reliability Engineering (SRE) in the CTO organization. We are an engineering team dedicated to building the security infrastructure, primitives, and reusable controls that protect MongoDB Atlas across AWS, Azure, and Google Cloud (GCP).

InfraSec operates on a preventative, enabling model: rather than acting as a manual approval gatekeeper or compliance auditor, we develop automated guardrails and platform capabilities. We integrate security directly into the platform runtime, CI/CD, and Infrastructure-as-Code (IaC) workflows so engineering teams can operate securely at scale without friction.

Key Responsibilities

• Workload & Host Hardening: Harden Linux hosts and containerized workloads using low-level mechanisms (AppArmor, SELinux, seccomp, cgroups) and eBPF-based security tooling (Cilium, Tetragon).
• Multi-Cloud Container Security: Secure containerized infrastructure across AWS, Azure, and GCP via RBAC, network policies, admission controls (Gatekeeper), and runtime threat detection.
• Security Platform Engineering: Build and manage automated services for Cloud Security Posture Management (CSPM), workload identity, vulnerability management, and access controls.
• Infrastructure as Code: Write production-quality code and leverage Terraform to version, test, and deploy security controls as code.
• Observability & Monitoring: Build real-time security monitoring, logging, and alerting systems to detect anomalies and track security posture at Atlas scale.
• End-to-End Ownership: Lead security initiatives across their full lifecycle—from threat modeling and architectural design to implementation, rollout, and long-term production reliability.

Requirements

Minimum Qualifications

• 5+ years of professional experience in SRE, Infrastructure Engineering, or Cloud Security Engineering.
• Strong coding skills in Go (Golang), Python, C, C++, or Rust.
• Proven track record of building and operating large-scale distributed systems or cloud platform infrastructure.
• Hands-on experience using Terraform, CloudFormation, or Ansible for automated infrastructure provisioning.
• Demonstrated experience owning infrastructure in Linux, Kubernetes, and at least one major cloud provider (AWS, GCP, or Azure).

Preferred Qualifications

• Practical experience with eBPF-based security tooling (Cilium, Falco, Tetragon).
• Direct ownership of Cloud Security Posture Management (CSPM) and Workload Identity platforms.
• Multi-cloud expertise spanning AWS, Azure, and GCP simultaneously.
• Production exposure to low-level Linux security mechanisms (seccomp, AppArmor, SELinux, cgroups).

Benefits & Total Rewards

• Equity & Stock: Equity grant eligibility and participation in the Employee Stock Purchase Program (ESPP).
• Time Off: Flexible paid time off (PTO) and observed holidays.
• Parental Leave: 20 weeks of fully paid, gender-neutral parental leave, plus fertility and adoption assistance.
• Health & Wellness: Comprehensive medical coverage including transgender-inclusive healthcare options, 401(k) retirement savings, and mental health counseling support.