MongoDB’s Security Assurance team is on a mission to make MongoDB one of the world’s most trusted technology vendors. We are doing this in two ways. First, we provide customers with the clear, concise and accurate information about the security of our products that customers require to use our products. Second, we serve as trusted security SMEs to MongoDB’s field teams.
The InfoSec Analyst I is an independent contributor role. This role is vital to the Security Assurance team’s mission and is responsible for coordinating completion of customer due diligence reviews as well as helping MongoDB’s field personnel answer complex customer security questions.
We are looking to speak to candidates who are based in Dublin for our hybrid working model.
Responsibilities:
- Actively manage the Assurance team’s queue to ensure requests are handled promptly
- Complete customer security reviews. Help other team members complete reviews as necessary
- Help customer facing personnel respond to customer security questions
- Monitor relevant channels and answer in scope questions when possible, or escalate to more senior team members
- Proactively maintain the team’s knowledgebase
- Proactively recommend improvements in team processes and tooling to team leadership
- Share relevant and actionable customer feedback with team leadership
- Help coordinate development of customer facing response to high-profile supply chain events including critical severity CVEs that may affect MongoDB or its vendors
- Lead complex projects to help build, scale and train the team
- Serve as an internal subject matter expert on MongoDB product security topics, assurance trends, customer concerns, and emerging regulations
- Design and deliver internal enablement training on security posture and compliance topics for teams across the organization
Requirements:
- 2 to 3 years of experience in Information Security
- BS in Computer Science, Information Systems, or equivalent experience
- Direct exposure to at least one major framework or regulation such as ISO 27001, SOC2, CSA or DORA is preferred
- Basic understanding of public cloud technologies including IAM, encryption, network security and tenant isolation
- Strong communication skills, with the ability to present security concepts to technical and non-technical stakeholders up to and including at the executive levels
- Ability to coordinate and manage multiple urgent requests simultaneously while effectively collaborating with SMEs across various time zones
- A self-starter with a strong desire to grow into a trusted authority on the security of MongoDB and its products
Success in this Role Means:
- Within 3 months - Have a solid understanding of MongoDB’s product portfolio, core security posture, and the Security Assur