Software Development Engineer II, Security

Mapbox is a real-time location platform that provides tools for navigation and location-aware experiences. The Software Development Engineer II, Security will contribute to, operate, and improve security and compliance services, including AWS security reviews, application security assessments, secure-by-default product design, security tooling, and on-call support.

Responsibilities:

• Conduct AWS security reviews (deep dive into our AWS environment to validate security best practices are being followed)
• Make security improvements recommendations and work with our production support teams to implement security improvement in AWS
• Partner with the Lead Security Architect in fixing custom-built security tools bots
• Conduct in-depth security reviews of application code, working closely with developers to code securely from the outset and address issues early during coding and testing phases
• Partner with internal product teams to implement a secure-by-default design into their own products
• Participate in an on-call rotation to ensure our systems remain available to customers 24/7. Team members alternate as the on-call primary responder, which may require immediate response outside normal working hours, including weekends

Requirements:

• Bachelor's or higher degree in Computer Science or similar
• 5+ years of experience in product or application security and related software engineering roles
• Experience with AWS services like GuardDuty, CloudTrail log review, IAM, Security Groups, CloudFront, CloudFormation, S3, ECS, Lambda, DynamoDB and RDS
• Proficiency in a programming language (e.g. Python, JavaScript or Node.js or TypeScript), testing practices, and documentation
• Subject matter expertise in security best practices and the ability to quickly make correct risk assessments that prioritize the overall benefit to the company