Staff Site Reliability Engineer, Infrastructure Security

As a Security Software Engineer in the Infrastructure Security team, you design and build core security primitives for MongoDB Atlas across AWS, Azure, and GCP. You will implement secure-by-default infrastructure using Linux security mechanisms, Kubernetes, and eBPF, enabling runtime policy enforcement and deep visibility. You will develop tooling and APIs to scale security posture management and integrate security into CI/CD and IaC workflows. You’ll lead end-to-end security projects and collaborate with SRE, platform, and product teams to architect secure infrastructure.

• flexible paid time off
• fully-paid parental leave (gender-neutral)
• fertility and adoption assistance
• 401(k) plan
• employee stock purchase program
• mental health counseling

• Design and implement core security primitives for multi-cloud Atlas infrastructure
• Build secure runtime policies using Linux security features, Kubernetes, and eBPF
• Develop CSPM, vulnerability management tooling, and monitoring/logging pipelines
• Integrate security controls into CI/CD and Terraform workflows
• Lead end-to-end security projects from discovery to ownership
• Collaborate with SRE, platform, and product teams on secure architectures

• 5+ years in Software Engineering, SRE, or related roles with security experience
• Proficiency in at least one programming language (Java, Go, Rust, Python, or C/C++)
• Experience with infrastructure-as-code (Terraform) for automating security configurations
• Strong understanding of Linux networking and system fundamentals
• Experience building security features like runtime monitoring, CSPM, or vulnerability management
• Experience with a cloud provider (AWS, GCP, or Azure) and their security best practices
• Hands-on Kubernetes experience and security ecosystem (RBAC, OPA/Gatekeeper, Kyverno, eBPF, Falco, Tetragon)
• Systems mindset addressing failure modes, performance, observability, and operability

• Strong communication skills to explain security concepts to technical and non-technical stakeholders
• Collaborative cross-team mindset
• Ability to manage complex projects and ownership
• Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups)
• Kubernetes security and ecosystem (RBAC, OPA/Gatekeeper, Kyverno, eBPF, Falco, Tetragon)
• eBPF and runtime policy enforcement