The opportunity
MongoDB is looking for a Senior InfoSec Analyst to join our Computer Security Incident Response Team. You will detect, investigate, and respond to security events across our corporate and cloud environments.
What you'll do
Lead investigations from triage through containment, scoping, remediation, and postmortem for security events
Analyze logs, endpoint telemetry, and cloud and SaaS audit data to: distinguish true positives from false positives and reconstruct attacker or user activity timelines
Investigate credential and secret exposure, endpoint detections, phishing,: data exposure, and policy violations such as unauthorized tool or AI usage
Automate repetitive response work using scripting and APIs, including: enrichment, ticketing, and notification workflows
Maintain runbooks, playbooks, and severity and escalation standards
Contribute to employee-facing security guidance and awareness
What they're looking for
- + years in security operations, incident response, detection engineering, or a related field
- Hands-on experience leading incidents end to end, including clear stakeholder: communication during and after an event
- Strong log analysis skills in a SIEM and fluency with EDR tools
- Working knowledge of cloud security (AWS, GCP, or Azure), identity and access management, and SaaS security
- Solid understanding of attacker techniques and frameworks such as MITRE ATT&CK
- Ability to prioritize and make sound decisions under ambiguity and time pressure
- Strong written communication, including incident reports and executive-ready summaries
