Staff Infrastructure Security Engineer | MongoDB Jobs | US

MongoDB’s InfraSec team works on a preventative, enabling model. Rather than acting as a manual approval gatekeeper or compliance auditor, it builds automated guardrails and platform capabilities. Security is integrated directly into the platform runtime, CI/CD, and Infrastructure-as-Code (IaC) workflows, so engineering teams can operate securely at scale without friction. In this role, you will define technical direction, resolve cross-team ambiguity, and personally champion initiatives from conception to delivery.

Key Responsibilities

• Harden hosts and containerized workloads using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups) and eBPF-based tooling (Cilium, Tetragon)
• Secure containerized infrastructure across multi-cloud environments with RBAC, network policies, admission controls (Gatekeeper), and runtime threat detection
• Build and manage automated services for Cloud Security Posture Management (CSPM), workload identity, vulnerability management, and access controls across AWS, Azure, and GCP
• Write production-quality code and use Terraform to version, test, and deploy security controls as code
• Build real-time security monitoring, logging, and alerting systems to detect anomalies and track security posture at Atlas scale
• Lead initiatives across their full lifecycle, from threat modeling and architectural design to implementation, rollout, and long-term production reliability

Requirements

• 10+ years in SRE, infrastructure engineering, or cloud security engineering
• A track record of operating at Staff or Principal scope: defining technical direction, resolving cross-team ambiguity, and championing initiatives from conception to delivery
• Strong coding skills in Go, Python, C, C++, or Rust
• Proven experience building and operating large-scale distributed systems or cloud platform infrastructure
• Hands-on experience with Terraform, CloudFormation, or Ansible for automated infrastructure provisioning
• Demonstrated experience owning infrastructure in Linux, Kubernetes, and at least one major cloud provider (AWS, GCP, or Azure)
• Education: Not specified

Skills

Technical Skills

• Go, Python, C, C++, or Rust
• Terraform, CloudFormation, or Ansible
• Linux, Kubernetes, and multi-cloud (AWS, GCP, Azure)
• Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups)
• Cloud Security Posture Management, workload identity, and vulnerability management
• Security monitoring, logging, and alerting

Soft Skills

• Technical direction-setting and ownership
• Resolving cross-team ambiguity
• Championing initiatives from concept to delivery

Nice to Have

• Practical experience with eBPF-based security tooling (Cilium, Falco, Tetragon)
• Direct ownership of Cloud Security and Workload Identity platforms
• Multi-cloud expertise spanning AWS, Azure, and GCP
• Production exposure to low-level Linux security mechanisms (seccomp, AppArmor, SELinux, cgroups)

Benefits

Benefits for eligible U.S.-based employees may include:

• Equity and an employee stock purchase program
• Flexible paid time off
• 20 weeks of fully paid, gender-neutral parental leave
• Fertility and adoption assistance
• 401(k) plan
• Mental health counseling
• Transgender-inclusive health insurance coverage and other health benefits