Senior Application Security Engineer, MongoDB
$118-231k
More information about location
Developer data platform
Open for applications
Developer data platform
1001+ employees
Open for applications
$118-231k
More information about location
1001+ employees
Company mission
To empower innovators to create, transform, and disrupt industries by unleashing the power of software and data.
Role
Who you are
- We’re seeking a senior-level security engineer with strong technical depth, sound judgment, and the ability to influence secure design and development practices across the organization
- You should be comfortable operating across the full SDLC, collaborating cross-functionally, and balancing hands-on execution with strategic thinking
- 4+ years of hands-on experience in at least two of the following: application penetration testing, secure code review, or cloud security
- 1+ year of software development experience using languages such as Python, TypeScript, JavaScript, or Go
- Solid understanding of application security and security engineering fundamentals, including system and network security, authentication and security protocols, and cryptography
- Experience performing application architecture reviews and identifying design-level security risks
- Hands-on experience with vulnerability management tools and processes, including remediation tracking
- Ability to build scripts or automation to support security initiatives
- Experience with threat modeling and presenting findings and recommendations to senior stakeholders
- Familiarity with cloud platforms and SaaS technologies (e.g., AWS, GCP, Google Workspace)
- Working knowledge of security standards and compliance frameworks such as SOC 2, HIPAA, or FedRAMP
- Strong written and verbal communication skills, with the ability to tailor messaging for technical and non-technical audiences
- Relevant security certifications (e.g., OSCP, OSCE, OSEP, OSWE, OSEE, CCSAS, CCT INF, CWES, CWEE, or equivalent SANS certifications)
What the job involves
- As a Senior Application Security Engineer, you’ll play a critical role in advancing MongoDB’s Information Security program at a company disrupting an $80B market
- You’ll help secure the applications and integrations that power our internal operations and cloud offerings, working closely with engineering, product, and infrastructure teams to embed security throughout the software development lifecycle
- You’ll assess the security of new and existing applications through secure code reviews, penetration testing, and architecture reviews, identifying risk across SaaS-to-SaaS and SaaS-to-internal integrations
- You’ll support application asset inventory and vulnerability management efforts, develop automation to improve security testing and operational efficiency, and apply threat modeling to recommend mitigations aligned with business risk
- In addition, you’ll collaborate with teams to design secure, scalable solutions, clearly communicate findings to both technical and non-technical stakeholders, and help evolve application security standards, processes, and documentation; enabling MongoDB to move quickly while maintaining a strong security posture
- You’ll be successful in this role if you consistently demonstrate:
- Collaboration: Partner effectively with engineers and stakeholders to secure applications and services
- Execution & Prioritization: Manage multiple initiatives using a risk-based approach
- Communication: Clearly articulate security risks, trade-offs, and recommendations
- Curiosity & Learning: Stay current on emerging threats, tools, and techniques
- Problem Solving: Develop practical, scalable solutions to complex security challenges
Our take
MongoDB is an open-source, cross-platform, document-oriented database system. It stores data as JSON-like documents and is written in C++, Go, JavaScript and Python.
Essentially, the company develops tools and blueprints to help businesses and organisations modernise their legacy applications, migrating them to the MongoDB database and the MongoDB Atlas cloud database. With this initiative, MongoDB is particularly taking aim at Oracle customers with ageing applications running on the Oracle relational database system.
Since its release, MongoDB has become one of the most popularly used NoSQL database systems due to its ease of use and efficiency. It is also the fastest-growing database ecosystem, and boasts hundreds of millions of downloads. Recently, the company announced a partnership with Patronus AI, an automated evaluation and security platform, through which it will bring automated LLM evaluation and testing capabilities to enterprise customers.
Freddie
Company Specialist at Welcome to the Jungle
Insights
13% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Jan 2015
$80m
SERIES G
Oct 2013
$150m
SERIES F
Total funding: $311.1m
Company benefits
- Rich health insurance coverage
- Virtual & on-site fitness classes
- Health screenings & telemedicine
- Access to transgender-inclusive health insurance coverage
- Global and internal mobility opportunities
- Equity & Employee Stock Purchase Program
- Pension & retirement programs
- Income Protection
- Flexible PTO is offered to every US employee & competitive time off policies for non-US employees
- Employee Assistance Program
- Mental health counseling
- Free meditation app access
- Fertility & adoption financial assistance
- Parental counseling for new parents
- 20 weeks of fully paid gender neutral parental leave & flexible work arrangements
- 4 weeks of emergency care leave
Company HQ
Theater District, New York, NY
Leadership
Dwight Merriman
(Co-Founder)Previously CTO and Co-founder at DoubleClick for 10 years, and Chairman at AlleyCorp for 15 years.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 182 more jobs at MongoDB