# Principal Security Engineer at MongoDB

> United States · Principal · Security · open. Source: https://alderhq.app/jobs/greenhouse%3Amongodb%3A8274032 (read 2026-11-05).

## Facts (observed)

- Company: [MongoDB](https://alderhq.app/companies/mongodb)
- Location text: New York City; Seattle; United States; San Francisco
- Where it can be done from (inferred): United States (evidence: "Location: New York City; Seattle; United States; San Francisco")
- Posted: 2026-10-16 (20 days ago)
- First seen by alder: 2026-11-02 · last verified: 2026-11-04
- Reposted: 0 times · edited: 1 times
- Apply on the employer's site: https://www.mongodb.com/careers/job/?gh_jid=8274032
- Skills listed (inferred): MongoDB

## Pay and sponsorship

- Posted pay: $203k–$399k per year (from the listing's pay field)
- Market band for similar posted roles (New York, n 6): p25 $215k, median $222k, p75 $262k
- H-1B filings at this company for similar roles, FY26: 53, median offered wage $149k ([US DOL OFLC LCA disclosure data](https://www.dol.gov/agencies/eta/foreign-labor/performance))
- Recognised sponsor (NL): registered as "MongoDB Netherlands B.V." (checked 2026-11-03, [register](https://ind.nl/en/public-register-recognised-sponsors/public-register-regular-labour-and-highly-skilled-migrants))
- Licensed UK sponsor: registered as "MongoDB UK Limited" (checked 2026-11-03, [register](https://www.gov.uk/government/publications/register-of-licensed-sponsors-workers))

## Description (the employer's text)

MongoDB's Global Security Organization (GSO) is looking for a Principal Security Engineer. The GSO secures MongoDB's products, infrastructure, and the trust our customers place in us — spanning product security, corporate security, and risk, and working across engineering, go-to-market, and corporate development to keep security moving at the same speed as the business.

The Principal Security Engineer will serve as a senior technical anchor for the team. This is a deep individual-contributor role that will stay hands-on with hard security and architecture problems, form sharp independent opinions, and know how to debate, align, and commit once GSO has made a call.

Key topic areas will include collaborating with our product teams to ensure identity and permission models meet customer needs for our new autonomous agent platform and working with integration security teams to push the envelope on automated detection, reproduction, and remediation of security vulnerabilities via AI. What we need here is depth, judgment, and the ability to build up the bench of senior technical talent around you.

This role can be based out of our NYC or Seattle office or remotely in the North America region.

### Responsibilities

- Maintain real technical depth in security and in MongoDB's product architecture — compute, network, and storage — deep enough to evaluate actual risk rather than apply generic best practice
- Form independent, well-reasoned opinions on security and architecture decisions, and voice them even when they cut against consensus or a leader's default plan
- Push teams to move faster when process or over-engineering is introducing complexity without reducing risk — and push teams to slow down when GTM pressure is outrunning a clear-eyed view of the risk
- Debate hard, then align, then commit: help the org land on the right call, then execute on it
- Seed and grow a working community of senior ICs embedded in security operations, product security, and enterprise security — connecting people, sharing knowledge, and creating the venues (formal or informal) for that to happen
- Lead time-boxed, high-stakes, cross-functional engagements such as M&A security due diligence and partner risk assessments, often with incomplete information and a short runway
- Draw on your own expertise where it applies, and quickly figure out how to close knowledge gaps elsewhere — staying accountable for the outcome either way
### Requirements

- 12+ years of experience in security engineering, software engineering, or a related discipline, including senior individual-contributor or technical-lead experience
- Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience
- Deep, credible technical expertise in security, plus working depth across compute, network, and storage architecture
- A track record of forming and defending independent technical positions, along with the judgment to know when to stop debating and commit
- Experience influencing without formal authority, including with management and cross-functional partners, in both directions — accelerating and slowing down decisions
- Comfort owning ambiguous, deadline-driven work such as M&A diligence or partner risk reviews, and being accountable for the result even without the full picture upfront
- A genuine interest in mentoring and connecting other senior engineers, without needing a management title to do it
Don't feel that you meet all of the requirements? We encourage you to apply anyway — studies show strong candidates sometimes rule themselves out prematurely. MongoDB has a diverse, inclusive, equitable, and high-performing environment, and we want to keep improving our ability to deliver for customers.

### Nice to Haves

- Direct experience leading M&A security due diligence or partner/vendor risk assessments
- Background spanning multiple layers of the stack (e.g., network and storage, or application and infrastructure security)
- A history of building or growing technical communities of practice
### Success in This Role Means

---
Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/greenhouse%3Amongodb%3A8274032 and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.
