security
Posted 5 days agoSenior Product Security Engineer, Server
at MongoDB
Dublin, IrelandHybrid
Responsibilities
- Build a developer driven security program where there is tight integration with engineering artifacts, process, and tooling.
- Advocate for and lead complex security projects from inception through completion
- Drive architecture, patterns, and processes across Server Engineering that make security the easiest path
- Research and POC new attacks against our systems.
- Plan and perform product security assessments including architecture review threat modeling, code review, pen testing and general security consulting to proactively build security controls
Requirements
- With a strong security engineering background, you’re looking for a role that gives you the freedom to increase MongoDB’s resonance with customers by strengthening our core database products.
- The MongoDB Product Security organization is a diverse collection of individuals working together to scale MongoDB’s security, both security of the products themselves and the security features we offer to customers.
- The team is responsible for the MongoDB Database Server ( Community and Enterprise editions).
- The MongoDB Product Security organization works with software engineers to design, implement, and operate systems in a manner that protects customer data.
- experience in application security, software security, or product security Proven
- experience in C++ programming, performing security assessments on low-level codebases, and implementing remediation strategies for memory-related security flaws such as buffer overflows and memory leaks Programming
- experience and ability to contribute code back to our environments
- A strong track record of partnering with software engineers: leading threat models, performing security design reviews, and developing an understanding of their product space to form pragmatic security recommendations and influence their prioritization.
- Knowledge of database engines, database internals, or applied cryptography •
- Experience contributing or partnering with security researchers to identify vulnerabilities that eventually are published CVEs or administrative
- Establishing yourself as a go-to person for discussing security topics About MongoDB
- We have redefined the data platform for the AI era, enabling builders to create, transform, and disrupt industries with software.
- MongoDB’s unified data platform, the most widely available, globally distributed data platform on the market, helps organizations modernize legacy workloads, embrace innovation, and unleash AI.
- Our cloud-native platform, MongoDB Atlas, is the only globally distributed, multi-cloud data platform and is available across AWS, Google Cloud, and Microsoft Azure.
- With offices worldwide and over 67,000 customers, including 75% of the Fortune 100 and AI-native startups, relying on MongoDB for their most important applications, we’re powering the next era of software.
- Learn more about what it’s like to work at MongoDB , and help us make an impact on the world!
Experience
- Educate the engineering org on security through CTFs, lunch-and-learns, and one-on-one mentorship Requirements 7+ years of
Benefits
- From employee affinity groups, to fertility assistance and a generous parental leave policy , we value our employees’ wellbeing and want to support them along every step of their professional and personal journeys.
Additional details
- You’re passionate about solving hard security engineering problems while putting a strong emphasis on customer experience, leveraging your own significant experience.
- You enjoy collaborating with different teams to innovate and implement pragmatic solutions. Who We Are
- It is a multidisciplinary team that covers product, software, cloud, infrastructure, and operational security concerns.
- Use software architecture and coding patterns to reduce the impact of security issues.
- Be security subject matter experts for our tech stack and products.
- We are looking to speak to candidates who are based in Dublin for our hybrid working model. Responsibilities
- You will take ownership, define strategy, and drive improvement for parts of our program such as fuzzing, threat modeling, secrets management, or container security
- Partner closely with engineering teams to design and implement security controls across our software and systems
- Serve as a security subject matter expert for software security and architecture
- Comfortable communicating complex technical issues in a simple manner that builds trust with a variety of audiences