Principal Security Engineer

MongoDB•New York City, NY

About The Position

MongoDB’s Global Security Organization (GSO) is seeking a Principal Security Engineer to serve as a senior technical anchor. This is a hands-on individual-contributor role focused on complex security and architecture challenges, with an emphasis on sound technical judgment, independent opinions, and constructive debate followed by alignment and execution. The role includes partnering with product teams on identity and permission models for a new autonomous agent platform and working with integration security teams to advance AI-enabled detection, reproduction, and remediation of security vulnerabilities. The position also helps build the senior technical community across security operations, product security, and enterprise security. It leads high-stakes, time-boxed cross-functional engagements, such as M&A security due diligence and partner risk assessments, and remains accountable for outcomes even when information is incomplete. The role may be based in MongoDB’s NYC or Seattle office, or remotely in North America.

Requirements

12 or more years of experience in security engineering, software engineering, or a related discipline, including senior individual-contributor or technical-lead experience.
Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
Deep, credible technical expertise in security and working depth across compute, network, and storage architecture.
Track record of forming and defending independent technical positions, with the judgment to stop debating and commit when appropriate.
Experience influencing without formal authority, including with management and cross-functional partners, and the ability to accelerate or slow decisions as appropriate.
Comfort owning ambiguous, deadline-driven work such as M&A diligence or partner risk reviews and being accountable for results despite incomplete information.
Genuine interest in mentoring and connecting senior engineers without requiring a management title.

Nice To Haves

Direct experience leading M&A security due diligence or partner/vendor risk assessments.
Background spanning multiple layers of the stack, such as network and storage or application and infrastructure security.
History of building or growing technical communities of practice.

Responsibilities

Maintain technical depth in security and MongoDB product architecture across compute, network, and storage to evaluate actual risk.
Form and communicate independent, well-reasoned opinions on security and architecture decisions, including when they differ from consensus or a leader’s default plan.
Help teams accelerate when process or over-engineering adds complexity without reducing risk, and slow down when go-to-market pressure outpaces clear risk assessment.
Debate decisions, help the organization reach the right call, align once it is made, and execute on it.
Build and grow a working community of senior individual contributors across security operations, product security, and enterprise security by connecting people, sharing knowledge, and creating opportunities for collaboration.
Lead time-boxed, high-stakes cross-functional engagements such as M&A security due diligence and partner risk assessments, often with incomplete information and tight timelines.
Apply personal expertise where relevant, identify and close knowledge gaps elsewhere, and remain accountable for outcomes.
Collaborate with product teams on identity and permission models for the autonomous agent platform.
Work with integration security teams to advance automated, AI-enabled detection, reproduction, and remediation of security vulnerabilities.