Product Security Engineer (Security Assessments)
Remote$126k - $248kFull-timePosted 1w ago
About the role
Seasoned security professional focused on vulnerability discovery and product security through hands-on penetration testing, threat modeling, and security assessments for MongoDB products and cloud deployments.
Responsibilities
- Leading the evolution of internal security and assessment processes by leveraging AI-based analysis to enhance threat modeling, penetration testing workflows, and assessment efficiency
- Conducting deep-dive penetration tests and hands-on security assessments of MongoDB products, including architecture reviews, threat modeling, static/dynamic code analysis, and vulnerability exploit verification
- Researching, prototyping, and executing new attack vectors and techniques to strengthen defensive measures
- Collaborating with engineering teams to advocate security best practices and remediate identified vulnerabilities
- Recommending secure coding patterns, container security measures, and secrets management strategies
- Partnering with product development teams to ensure secure delivery across cloud environments, applications, and systems
- Coordinating with red team and detection functions to address potential security incidents or implement new defensive or monitoring capabilities
Qualifications
- 7+ years of experience in application security, product security or penetration testing roles, including manual and automated approaches
- Proven expertise in product security assessment techniques such as threat modeling, penetration testing, red teaming, and secure code reviews
- Some programming and scripting skills, with familiarity in one or more languages such as Python or Golang
- Hands-on experience with one or more major cloud providers (AWS, GCP, Azure)
- Experience leading threat modeling workshops and discussing security issues with engineers
- Comfortable explaining and communicating technical concepts and findings to both technical and non-technical audiences
- Demonstrated ownership of security initiatives, with the ability to deliver results autonomously or collaboratively
- Working knowledge of large-scale distributed systems and container technologies (e.g., Kubernetes, Docker)
- Knowledge of security tools and frameworks for cloud and application security
Skills
Required:Penetration testingThreat modelingScripting / programmingCloud platformsCommunicationSecurity tooling
Nice to have:Code review
Benefits
- Equity
- Participation in the employee stock purchase program
- Flexible paid time off
- 20 weeks fully-paid gender-neutral parental leave
- Fertility and adoption assistance
- 401(k) plan
- Mental health counseling
- Access to transgender-inclusive health insurance coverage
- Health benefits offerings
Last updated Oct 15, 2026. Interested? Apply on the company site.
About MongoDB
The World’s Leading Modern Database
Get your ideas to market faster with a flexible, AI-ready database. MongoDB makes working with data easy.
DatabaseAIUnstructured DataStructured DataRecommendation enginesQ&A systemsAnomaly detectionGen AI
More open roles at MongoDB
- Software Engineer, Query Execution5d agoHybrid (Spain) · Query Execution Team
- Software Engineer, Query Execution5d agoRemote · Query Execution Team
- Pre-Sales Solutions Architecture Manager5d agoHybrid (Gurugram) · Gurugram Hybrid Working Model
- Software Engineer, Query Execution5d agoHybrid (Bulgaria)
- Software Engineer, Query Execution5d agoHybrid (Netherlands) · Query Execution Team