Senior Software Engineer (SRE), Infrastructure Security

MongoDB's Infrastructure Security (InfraSec) team, within Site Reliability Engineering (SRE) in the CTO organization, is seeking a Senior Software Engineer (SRE) to build security infrastructure, primitives, and reusable controls that protect MongoDB Atlas across AWS, Azure, and Google Cloud (GCP). The team operates on a preventative, enabling model, developing automated guardrails and platform capabilities integrated into the platform runtime, CI/CD, and Infrastructure-as-Code (IaC) workflows.

• Harden hosts and containerized workloads using Linux security mechanisms (AppArmor, SELinux, seccomp, cgroups) and eBPF-based tooling (Cilium, Tetragon).
• Secure containerized infrastructure across multi-cloud environments via RBAC, network policies, admission controls (Gatekeeper), and runtime threat detection.
• Build and manage automated services for Cloud Security Posture Management (CSPM), workload identity, vulnerability management, and access controls across AWS, Azure, and GCP.
• Write production-quality code and leverage Infrastructure-as-Code (Terraform) to version, test, and deploy security controls as code.
• Build real-time security monitoring, logging, and alerting systems to detect anomalies and track security posture at Atlas scale.
• Lead initiatives across their full lifecycle; from threat modeling and architectural design to implementation, rollout, and long-term production reliability.

• 5+ years in SRE, Infrastructure Engineering, or Cloud Security Engineering.
• Strong coding skills in Go (Golang), Python, C, C++, or Rust.
• Proven track record of building and operating large-scale distributed systems or cloud platform infrastructure.
• Hands-on experience using Terraform, CloudFormation, or Ansible for automated infrastructure provisioning.
• Demonstrated experience owning infrastructure in Linux, Kubernetes, and at least one major cloud provider (AWS, GCP, or Azure).

• Practical experience with eBPF-based security tooling (Cilium, Falco, Tetragon).
• Direct ownership of Cloud Security and Workload Identity platforms.
• Multi-cloud expertise spanning AWS, Azure, and GCP.
• Production exposure to low-level Linux security mechanisms (seccomp, AppArmor, SELinux, cgroups).

The base salary range for this role in the U.S. is $126,000—$248,000 USD. Other benefits for eligible employees may include: equity, participation in the employee stock purchase program, flexible paid time off, 20 weeks fully-paid gender-neutral parental leave, fertility and adoption assistance, 401(k) plan, mental health counseling, access to transgender-inclusive health insurance coverage, and health benefits offerings.

This role can be based out of our New York City office or remotely in the eastern or central timezone.