Security Analyst, NHI (Non-Human Identity)

At MongoDB, we are building the future of data platforms with MongoDB Atlas; our fully managed, multi-cloud database service. The Infrastructure Security (InfraSec) team sits within Site Reliability Engineering (SRE) in the CTO organization. We are an engineering team dedicated to building the security infrastructure, primitives, and reusable controls that protect MongoDB Atlas across AWS, Azure, and Google Cloud (GCP).

InfraSec operates on a preventative, enabling model: rather than acting as a manual approval gatekeeper or compliance auditor, we develop automated guardrails and platform capabilities. We integrate security directly into the platform runtime, CI/CD, and Infrastructure-as-Code (IaC) workflows so engineering teams can operate securely at scale without friction.

This role can be based out of our New York City office or remotely in the eastern or central timezone.

What You’ll Do

Harden hosts and containerized workloads using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups) and eBPF-based tooling (Cilium, Tetragon)
Secure containerized infrastructure across multi-cloud environments via RBAC, network policies, admission controls (Gatekeeper), and runtime threat detection.
Build and manage automated services for Cloud Security Posture Management (CSPM), workload identity, vulnerability management, and access controls across AWS, Azure, and GCP
Write production-quality code and leverage Infrastructure-as-Code (Terraform) to version, test, and deploy security controls as code
Build real-time security monitoring, logging, and alerting systems to detect anomalies and track security posture at Atlas scale
Lead initiatives across their full lifecycle; from threat modeling and architectural design to implementation, rollout, and long-term production reliability

What We’re Looking For

Minimum Qualifications:

5+ years in SRE, Infrastructure Engineering, or Cloud Security Engineering
Strong coding skills in Go (Golang), Python, C, C++, or Rust.
Proven track record of building and operating large-scale distributed systems or cloud platform infrastructure.
Hands-on experience using Terraform, CloudFormation, or Ansible for automated infrastructure provisioning.
Demonstrated experience owning infrastructure in Linux, Kubernetes, and at least one major cloud provider (AWS, GCP, or Azure)

Preferred Qualifications:

Practical experience with eBPF-based security tooling (Cilium, Falco, Tetragon)
Direct ownership of Cloud Security and Workload Identity platforms
Multi-cloud expertise spanning AWS, Azure, and GCP
Production exposure to low-level Linux security mechanisms (seccomp, AppArmor, SELinux, cgroups)

About MongoDB

MongoDB is built for change, empowering our customers and our people to innovate at the speed of the market. We have redefined the database for the AI era, enabling innovators to create, transform, and disrupt industries with software. MongoDB’s unified database platform—the most widely available, globally distributed database on the market—helps organizations modernize legacy workloads, embrace innovation, and unleash AI. Our cloud-native platform, MongoDB Atlas, is the only globally distributed, multi-cloud database and is available across AWS, Google Cloud, and Microsoft Azure.

With offices worldwide and nearly 60,000 customers—including 75% of the Fortune 100 and AI-native startups—relying on MongoDB for their most important applications, we’re powering the next era of software.

Our compass at MongoDB is our Leadership Commitment, guiding how and why we make decisions, show up for each other, and win. It’s what makes us MongoDB.

To drive the personal growth and business impact of our employees, we’re committed to developing a supportive and enriching culture for everyone. From employee affinity groups, to fertility assistance and a generous parental leave policy, we value our employees’ wellbeing and want to support them along every step of their professional and personal journeys. Learn more about what it’s like to work at MongoDB, and help us make an impact on the world!

MongoDB is committed to providing any necessary accommodations for individuals with disabilities within our application and interview process. To request an accommodation due to a disability, please inform your recruiter.

MongoDB, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type and makes all hiring decisions without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Req ID: 1273374882

MongoDB’s base salary range for this role is posted below. Compensation at the time of offer is unique to each candidate and based on a variety of factors such as skill set, experience, qualifications, and work location. Salary is one part of MongoDB’s total compensation and benefits package. Other benefits for eligible employees may include: equity, participation in the employee stock purchase program, flexible paid time off, 20 weeks fully-paid gender-neutral parental leave, fertility and adoption assistance, 401(k) plan, mental health counseling, access to transgender-inclusive health insurance coverage, and health benefits offerings. Please note, the base salary range listed below and the benefits in this paragraph are only applicable to U.S.-based candidates.

MongoDB’s base salary range for this role in the U.S. is:

$126,000—$248,000 USD

Job Description

Who We Are

This role can be based out of our New York City office or remotely in the eastern or central timezone.

What You’ll Do

Harden hosts and containerized workloads using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups) and eBPF-based tooling (Cilium, Tetragon)
Secure containerized infrastructure across multi-cloud environments via RBAC, network policies, admission controls (Gatekeeper), and runtime threat detection.
Build and manage automated services for Cloud Security Posture Management (CSPM), workload identity, vulnerability management, and access controls across AWS, Azure, and GCP
Write production-quality code and leverage Infrastructure-as-Code (Terraform) to version, test, and deploy security controls as code
Build real-time security monitoring, logging, and alerting systems to detect anomalies and track security posture at Atlas scale
Lead initiatives across their full lifecycle; from threat modeling and architectural design to implementation, rollout, and long-term production reliability

What We’re Looking For

Minimum Qualifications:

5+ years in SRE, Infrastructure Engineering, or Cloud Security Engineering
Strong coding skills in Go (Golang), Python, C, C++, or Rust.
Proven track record of building and operating large-scale distributed systems or cloud platform infrastructure.
Hands-on experience using Terraform, CloudFormation, or Ansible for automated infrastructure provisioning.
Demonstrated experience owning infrastructure in Linux, Kubernetes, and at least one major cloud provider (AWS, GCP, or Azure)

Preferred Qualifications:

Practical experience with eBPF-based security tooling (Cilium, Falco, Tetragon)
Direct ownership of Cloud Security and Workload Identity platforms
Multi-cloud expertise spanning AWS, Azure, and GCP
Production exposure to low-level Linux security mechanisms (seccomp, AppArmor, SELinux, cgroups)

About MongoDB

Our compass at MongoDB is our Leadership Commitment, guiding how and why we make decisions, show up for each other, and win. It’s what makes us MongoDB.

Req ID: 1273374882

MongoDB’s base salary range for this role in the U.S. is:

$126,000—$248,000 USD

Job Description

Who We Are

This role can be based out of our New York City office or remotely in the eastern or central timezone.

What You’ll Do

Harden hosts and containerized workloads using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups) and eBPF-based tooling (Cilium, Tetragon)
Secure containerized infrastructure across multi-cloud environments via RBAC, network policies, admission controls (Gatekeeper), and runtime threat detection.
Build and manage automated services for Cloud Security Posture Management (CSPM), workload identity, vulnerability management, and access controls across AWS, Azure, and GCP
Write production-quality code and leverage Infrastructure-as-Code (Terraform) to version, test, and deploy security controls as code
Build real-time security monitoring, logging, and alerting systems to detect anomalies and track security posture at Atlas scale
Lead initiatives across their full lifecycle; from threat modeling and architectural design to implementation, rollout, and long-term production reliability

What We’re Looking For

Minimum Qualifications:

5+ years in SRE, Infrastructure Engineering, or Cloud Security Engineering
Strong coding skills in Go (Golang), Python, C, C++, or Rust.
Proven track record of building and operating large-scale distributed systems or cloud platform infrastructure.
Hands-on experience using Terraform, CloudFormation, or Ansible for automated infrastructure provisioning.
Demonstrated experience owning infrastructure in Linux, Kubernetes, and at least one major cloud provider (AWS, GCP, or Azure)

Preferred Qualifications:

Practical experience with eBPF-based security tooling (Cilium, Falco, Tetragon)
Direct ownership of Cloud Security and Workload Identity platforms
Multi-cloud expertise spanning AWS, Azure, and GCP
Production exposure to low-level Linux security mechanisms (seccomp, AppArmor, SELinux, cgroups)

About MongoDB

Our compass at MongoDB is our Leadership Commitment, guiding how and why we make decisions, show up for each other, and win. It’s what makes us MongoDB.

Req ID: 1273374882

MongoDB’s base salary range for this role in the U.S. is:

$126,000—$248,000 USD

Job Description

Who We Are

This role can be based out of our New York City office or remotely in the eastern or central timezone.

What You’ll Do

Harden hosts and containerized workloads using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups) and eBPF-based tooling (Cilium, Tetragon)
Secure containerized infrastructure across multi-cloud environments via RBAC, network policies, admission controls (Gatekeeper), and runtime threat detection.
Build and manage automated services for Cloud Security Posture Management (CSPM), workload identity, vulnerability management, and access controls across AWS, Azure, and GCP
Write production-quality code and leverage Infrastructure-as-Code (Terraform) to version, test, and deploy security controls as code
Build real-time security monitoring, logging, and alerting systems to detect anomalies and track security posture at Atlas scale
Lead initiatives across their full lifecycle; from threat modeling and architectural design to implementation, rollout, and long-term production reliability

What We’re Looking For

Minimum Qualifications:

5+ years in SRE, Infrastructure Engineering, or Cloud Security Engineering
Strong coding skills in Go (Golang), Python, C, C++, or Rust.
Proven track record of building and operating large-scale distributed systems or cloud platform infrastructure.
Hands-on experience using Terraform, CloudFormation, or Ansible for automated infrastructure provisioning.
Demonstrated experience owning infrastructure in Linux, Kubernetes, and at least one major cloud provider (AWS, GCP, or Azure)

Preferred Qualifications:

Practical experience with eBPF-based security tooling (Cilium, Falco, Tetragon)
Direct ownership of Cloud Security and Workload Identity platforms
Multi-cloud expertise spanning AWS, Azure, and GCP
Production exposure to low-level Linux security mechanisms (seccomp, AppArmor, SELinux, cgroups)

About MongoDB

Our compass at MongoDB is our Leadership Commitment, guiding how and why we make decisions, show up for each other, and win. It’s what makes us MongoDB.

Req ID: 1273374882

MongoDB’s base salary range for this role in the U.S. is:

$126,000—$248,000 USD