Security Software Engineer, Infrastructure Security (Staff or Senior)

We are hiring an experienced Security Software Engineer (Staff or Senior) for our Infrastructure Security team to design and build scalable security controls and services within MongoDB Atlas multi-cloud infrastructure.

The team sits within the Site Reliability Engineering organization and works with other engineering teams to ensure that our infrastructure adheres to the highest security standards.

This role can be based out of our Canada offices or remotely in Canada, working standard East Coast business hours.

Responsibilities:

• Design and build core security primitives and services that protect MongoDB Atlas compute, networking, and identity across AWS, Azure, and GCP.
• Build secure-by-default infrastructure using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups), Kubernetes, and eBPF to enforce runtime policies and gain deep visibility into systems behaviour.
• Develop APIs, automation, and tooling that manage security posture at scale (CSPM, vulnerability management, workload identity) and provide monitoring, logging, and alerting pipelines that integrate with our tooling (Grafana, Splunk, Victoria Metrics.)
• Integrate security into our CI/CD and infrastructure-as-code workflows (Terraform) so that security controls are versioned, reviewed, and deployed just like any other code.
• Lead complex projects end‑to‑end, from problem discovery and design docs to implementation, rollout, and long‑term ownership.
• Collaborate with SRE, platform and product engineering teams to define secure architectures for new infrastructure and services.

Qualifications:

You might be a great fit if you match some of the following:

• 5+ years of experience in Software Engineering, Site Reliability Engineering, or similar roles, preferably with relevant security work.
• Proficiency with at least one programming language (Java, Golang, Rust, Python, or C/C++) and experience with infrastructure-as-code tools (Terraform) to automate security configurations and processes.
• A deep understanding of Linux and networking concepts, including low-level fundamentals, and how they work together in complex systems.
• Experience building security-related features or platforms such as runtime monitoring, CSPM, or vulnerability management.
• Experience with a cloud provider (AWS, GCP, or Azure) and their security best practices and building blocks.
• Hands-on experience with Kubernetes and its security ecosystem (e.g. RBAC, OPA/Gatekeeper, Kyverno, eBPF, Falco, Tetragon).
• A systems mindset: you think about failure modes, performance, observability, and operability alongside security and correctness.
• Strong communication skills and the ability to explain complex security concepts and tradeoffs to both technical and non-technical stakeholders.

About MongoDB

MongoDB is built for change, empowering our customers and our people to innovate at the speed of the market. We have redefined the database for the AI era, enabling innovators to create, transform, and disrupt industries with software. MongoDB’s unified database platform—the most widely available, globally distributed database on the market—helps organizations modernize legacy workloads, embrace innovation, and unleash AI. Our cloud-native platform, MongoDB Atlas, is the only globally distributed, multi-cloud database and is available across AWS, Google Cloud, and Microsoft Azure.

With offices worldwide and nearly 60,000 customers—including 75% of the Fortune 100 and AI-native startups—relying on MongoDB for their most important applications, we’re powering the next era of software.

Our compass at MongoDB is our guiding how and why we make decisions, show up for each other, and win. It’s what makes us MongoDB.