Product Security Engineer, Server

About this role

MongoDB seeks a Product Security Engineer to strengthen database security by designing and implementing protective measures across the MongoDB server. You'll partner with engineering teams to conduct threat modeling, code reviews, and security assessments while driving security improvements in fuzzing, secrets management, and container security.

What you'll do

• Own and drive security program initiatives such as fuzzing, threat modeling, secrets management, and container security
• Support engineering teams in responding to security issues with risk analysis and proof-of-concept work
• Conduct security assessments including architecture reviews, threat modeling, code review, and penetration testing
• Design and implement security controls across software systems in collaboration with engineering teams
• Research and test new attack vectors against MongoDB systems to identify vulnerabilities
• Educate the engineering organization through CTFs, workshops, and mentorship on security best practices

What they're looking for

• C++ programming and low-level codebase security analysis
• Memory safety expertise (buffer overflows, memory leaks, secure coding)
• Threat modeling and architecture security review
• Scripting and proof-of-concept development
• Application and product security assessment techniques
• Technical communication with diverse audiences
• Database security or data security knowledge (preferred)
• Applied cryptography or database internals understanding (preferred)