Senior Product Security Engineer, Assessments

Responsibilities

• Lead the evolution of internal security assessment processes using AI-based analysis and automation.
• Conduct deep-dive penetration tests and security assessments, including architecture reviews, threat modeling, static and dynamic code analysis, and exploit verification.
• Research, prototype, and execute new attack vectors and techniques.
• Collaborate with engineering teams to advocate security best practices and remediate vulnerabilities.
• Recommend secure coding patterns, container security measures, and secrets management strategies.
• Partner with product development teams to support secure delivery across cloud environments, applications, and systems.
• Coordinate with red team and detection functions to address potential incidents and implement defensive or monitoring capabilities.
• Guide and mentor the team while driving end-to-end ownership of security assessments.

Requirements

• 7+ years of experience in application security, product security, or penetration testing, including manual and automated approaches.
• Expertise in threat modeling, penetration testing, red teaming, and secure code reviews.
• Programming and scripting experience with familiarity in Python or Golang.
• Hands-on experience with AWS, GCP, or Azure.
• Experience leading threat modeling workshops and discussing security issues with engineers.
• Ability to explain technical concepts and findings to technical and non-technical audiences.
• Demonstrated ownership of security initiatives and ability to work autonomously or collaboratively.
• Working knowledge of large-scale distributed systems and container technologies such as Kubernetes and Docker.
• Knowledge of cloud and application security tools and frameworks.

Benefits

• Equity and participation in the employee stock purchase program.
• Flexible paid time off.
• 20 weeks of fully paid gender-neutral parental leave.
• Fertility and adoption assistance.
• 401(k) plan.
• Mental health counseling.
• Access to transgender-inclusive health insurance coverage and other health benefits.
• Benefits and listed salary range apply to U.S.-based candidates.
• MongoDB provides necessary disability accommodations during the application and interview process.