Site Reliability Engineer (Senior or Staff), Infrastructure Security

MongoDB is built for change, empowering our customers and our people to innovate at the speed of the market. They are seeking an experienced Senior or Staff Engineer for their SRE, InfraSec team, to guide the security of their cloud-based infrastructure while mentoring a small team of SREs.

Responsibilities:

• Help lead the design and deployment of security solutions for cloud platforms (AWS, Azure, GCP), including network and compute security, identity management, and cloud security posture management (CSPM)
• Build automated solutions for real-time security monitoring, logging, and alerting in cloud environments. Leverage native cloud services and third-party tools for runtime security monitoring and anomaly detection
• Evaluate, implement, and manage cloud-native security tools and platforms for endpoint security, identity management (IAM), and CSPM

Requirements:

• 6+ years of experience in SRE, infrastructure engineering or similar role, with a strong focus on security work, with ideally 2+ years in a senior or staff engineering role
• A comprehensive understanding of all facets of cloud environment security, spanning from foundational OS networking layers to cloud provider configurations. Proven experience in leading projects within security-focused areas, such as runtime scanning, security observability, CSPM, and more
• Strong experience with at least one cloud platform (AWS, Azure, GCP), including expertise in IAM, VPC networking, security groups, and cloud security tools (e.g., GuardDuty, Security Hub, CloudTrail)
• Proficiency in at least one programming language (we use Golang but are language agnostic when it comes to hiring) and experience with infrastructure-as-code tools (Terraform, CloudFormation, Ansible) to automate security configurations and processes
• Understanding of the underlying Linux and networking concepts, including low-level fundamentals, and how they work together in complex systems
• Strong ability to explain complex security concepts to both technical and non-technical teams. Ability to lead a small technical team and ensure success both meeting the team goals as well as personal growth for all team members