The opportunity
You are a seasoned security professional with a deep passion for uncovering vulnerabilities and improving product security through technical assessments and hands-on penetration testing. You pride yourself on being able to execute sophisticated security tests, identify issues,…
What you'll do
Conducts rigorous penetration testing and security assessments of MongoDB products
Develops and deploys advanced AI tooling and modern automation to enhance assessment efficiency and workflows
Works closely with Product and Engineering teams to advocate for security: best practices and remediate vulnerabilities
Builds a developer-driven security program where there is tight integration: between engineering artifacts, process, and tooling
Uses software architecture and coding patterns to reduce the impact of security issues
Leading the evolution of our internal security and assessment processes by: leveraging AI-based analysis to enhance threat modeling, penetration testing workflows, and assessment efficiency
What they're looking for
- + years of experience in application security, product security or: penetration testing roles, including manual and automated approaches
- Proven expertise in product security assessment techniques such as threat: modeling, penetration testing, red teaming, and secure code reviews
- Some programming and scripting skills, with familiarity in one or more languages such as Python or Golang
- Hands-on experience with one or more major cloud providers (AWS, GCP, Azure)
- Experience leading threat modeling workshops and discussing security issues with engineers
- Comfortable explaining and communicating technical concepts and findings to: both technical and non-technical audiences
- Demonstrated ownership of security initiatives, with the ability to deliver: results autonomously or collaboratively
- Working knowledge of large-scale distributed systems and container technologies (e.g., Kubernetes, Docker)
