← All roles

Product Security Engineer (Security Assessments)

MongoDB· Product Security
Apply on company site
Remote$126k - $248kFull-timePosted 1w ago

About the role

Seasoned security professional focused on vulnerability discovery and product security through hands-on penetration testing, threat modeling, and security assessments for MongoDB products and cloud deployments.

Responsibilities

  • Leading the evolution of internal security and assessment processes by leveraging AI-based analysis to enhance threat modeling, penetration testing workflows, and assessment efficiency
  • Conducting deep-dive penetration tests and hands-on security assessments of MongoDB products, including architecture reviews, threat modeling, static/dynamic code analysis, and vulnerability exploit verification
  • Researching, prototyping, and executing new attack vectors and techniques to strengthen defensive measures
  • Collaborating with engineering teams to advocate security best practices and remediate identified vulnerabilities
  • Recommending secure coding patterns, container security measures, and secrets management strategies
  • Partnering with product development teams to ensure secure delivery across cloud environments, applications, and systems
  • Coordinating with red team and detection functions to address potential security incidents or implement new defensive or monitoring capabilities

Qualifications

  • 7+ years of experience in application security, product security or penetration testing roles, including manual and automated approaches
  • Proven expertise in product security assessment techniques such as threat modeling, penetration testing, red teaming, and secure code reviews
  • Some programming and scripting skills, with familiarity in one or more languages such as Python or Golang
  • Hands-on experience with one or more major cloud providers (AWS, GCP, Azure)
  • Experience leading threat modeling workshops and discussing security issues with engineers
  • Comfortable explaining and communicating technical concepts and findings to both technical and non-technical audiences
  • Demonstrated ownership of security initiatives, with the ability to deliver results autonomously or collaboratively
  • Working knowledge of large-scale distributed systems and container technologies (e.g., Kubernetes, Docker)
  • Knowledge of security tools and frameworks for cloud and application security

Skills

Required:Penetration testingThreat modelingScripting / programmingCloud platformsCommunicationSecurity tooling
Nice to have:Code review

Benefits

  • Equity
  • Participation in the employee stock purchase program
  • Flexible paid time off
  • 20 weeks fully-paid gender-neutral parental leave
  • Fertility and adoption assistance
  • 401(k) plan
  • Mental health counseling
  • Access to transgender-inclusive health insurance coverage
  • Health benefits offerings
Last updated Oct 15, 2026. Interested? Apply on the company site.
MongoDB logo

About MongoDB

The World’s Leading Modern Database

Get your ideas to market faster with a flexible, AI-ready database. MongoDB makes working with data easy.

DatabaseAIUnstructured DataStructured DataRecommendation enginesQ&A systemsAnomaly detectionGen AI

More open roles at MongoDB