Senior Cloud Security Engineer, MongoDB

• At least 5 years of Cloud Security experience
• Subject matter expertise in securing infrastructure at scale in an enterprise environment in AWS and preferably one additional cloud provider (Azure or GCP)
• Strong understanding of IAM and data protection in cloud environments
• Experience using infrastructure-as-code, such as CloudFormation and Terraform, to deploy and manage solutions in cloud environments
• Experience with using scripting languages such as Python and/or orchestration tools such as Tines to automate and integrate different components and/or services
• The ability to perform security reviews of architectures and products, identify gaps and weaknesses present, and recommend controls to address them
• Experience helping to craft and deliver policies to drive the organization’s security posture forward
• The ability to convey complex technical issues to a variety of audiences of different levels of technical expertise and experience
• Enthusiasm about partnering with stakeholders across the business to deliver impactful solutions for the wider company
• Comfortable working in a team and providing constructive, actionable feedback as needed

Desirable

• We are looking for a highly skilled Cloud Security Engineer that will help us design, implement, and manage security solutions at scale. In this role, you will collaborate with cross-functional teams to enhance our overall cloud security posture and implement pragmatic solutions to hard security problems
• Secure cloud environments across AWS, Azure, and GCP with a focus on IAM, preventative controls, and resource permissions
• Automate the deployment and maintenance of security solutions and tooling using Terraform, CloudFormation, and Python
• Drive our enterprise cloud strategy in order to empower the business while protecting critical assets and data with appropriate security measures
• Design and implement security solutions to address gaps in the organization’s cloud security posture
• Conduct security assessments on cloud services, identifying misconfigurations, excessive permissions, and potential risks
• Partner with detection engineering and incident response teams to create new alerting and investigation capabilities
• Provide subject matter expertise to support cross-functional teams in the deployment and management of their cloud services and solutions