Tech Stack

Description

As a Senior Product Security Engineer on the Server team at MongoDB, you will lead security initiatives, conduct architecture reviews and threat modeling, and collaborate with engineering teams to embed security into the core database platform. You'll drive improvements in areas like fuzzing, secrets management, and container security while educating the organization through CTFs and mentorship.

Requirements

• 7+ years of experience in application security, software security, or product security
• Proven experience in C++ programming and security assessments on low-level codebases
• Experience implementing remediation strategies for memory-related security flaws like buffer overflows and memory leaks
• Strong track record of partnering with software engineers on threat models and security design reviews
• Demonstrated ownership of security initiatives with ability to deliver autonomously or collaboratively

Responsibilities

• Define strategy and drive improvement for parts of the security program such as fuzzing, threat modeling, secrets management, or container security
• Advocate for and lead complex security projects from inception through completion
• Drive architecture, patterns, and processes across Server Engineering that make security the easiest path
• Partner closely with engineering teams to design and implement security controls across software and systems
• Research and POC new attacks, perform product security assessments including architecture review, threat modeling, code review, pen testing