Senior Technical Program Manager, MongoDB Server Hardening

MongoDB

7h•Hybrid

About The Position

The MongoDB Product Security organization is a diverse collection of individuals working together to scale MongoDB’s security, both security of the products themselves and the security features we offer to customers. The team is responsible for the MongoDB Database Server (Community and Enterprise editions). The MongoDB Product Security organization works with software engineers to design, implement, and operate systems in a manner that protects customer data. It is a multidisciplinary team that covers product, software, cloud, infrastructure, and operational security concerns. The team does the following: Build a developer driven security program where there is tight integration with engineering artifacts, process, and tooling Use software architecture and coding patterns to reduce the impact of security issues Be security subject matter experts for our tech stack and products The Product Security organization is looking for a Senior Technical Program Manager who will own the planning and execution of our MongoDB Server security hardening efforts. You will connect long term security strategy to day-to-day engineering execution and help ensure that MongoDB Server continues to meet the expectations of our most demanding customers. We are looking to speak to candidates who are based on the U.S. East Coast for our hybrid working model.

Requirements

You are an experienced technical program manager who is comfortable working in deep engineering domains and who enjoys making complex work simpler and more manageable
You have 5+ years of experience running technical programs in software engineering organizations, including time spent in or very close to security, infrastructure, or platform teams in at least one area:
Product or application security
Infrastructure or platform engineering
Large-scale backend or database systems
You partner effectively with engineers, managers, and product leaders to turn high-level goals into clear plans and keep those plans on track through change
You are comfortable in technical discussions about system-level software, performance, reliability, and security risks; you ask good questions and summarize trade-offs for others
You are highly organized and pragmatic, fluent with tools like Jira, spreadsheets, and documents, and you communicate clearly with concise updates that leaders actually read
You understand that security is not just about checking the box or meeting compliance standards, but also about doing what is right by your customers and your business
You are data-informed and comfortable defining simple, meaningful measures of progress and risk for your programs

Responsibilities

Lead MongoDB Server hardening programs
You will own the end-to-end program to strengthen the security posture of MongoDB Server and related components
You will translate security and product goals into clear roadmaps, milestones and success measures and keep everyone aligned on priorities and tradeoffs
Drive cross-team execution
You will partner closely with Product Security engineers focused on Server and with Server engineering teams that build core database features such as authentication, authorization, encryption, and auditing
You will coordinate work across these teams as well as with build, test, and infrastructure partners to ensure projects land on time and with high quality
Make risk and progress visible
You will define and maintain lightweight metrics, dashboards, and status updates that clearly describe the state of Server hardening, key risks, next steps, and their importance
You will prepare concise written updates for engineering and security leadership and help frame decisions when priorities or scope need to change
Remove ambiguity and unblock teams
You will identify unclear ownership, vague requirements, and unexamined dependencies and drive them to resolution
You will maintain decision logs and risk registers where it helps, keep stakeholders aligned, and ensure that open questions do not linger on the critical path
Support secure development practices
You will work with Product Security and engineering leaders to integrate security considerations into design reviews, release planning, and validation