SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Mapbox is seeking a Senior Software Engineer to join the Security & Compliance team. This role focuses on building secure-by-default systems across Mapbox's global cloud infrastructure and digital assets.
Key responsibilities include:
- Conducting AWS security reviews to validate adherence to security best practices across Mapbox's AWS environment (7 global regions including China, primarily container-based)
- Making security improvement recommendations and collaborating with production support teams to implement changes
- Partnering with the Lead Security Architect to fix and maintain custom-built security tools and bots
- Performing in-depth security reviews of application code, working closely with developers to embed secure coding practices early in the development lifecycle
- Collaborating with internal product teams to implement secure-by-default design principles
- Participating in an on-call rotation to ensure 24/7 system availability, including potential off-hours and weekend response requirements
Mapbox is the leading real-time location platform serving over 4 million registered developers. The Security & Compliance team operates within a diverse, globally distributed organization and is responsible for threat detection systems, vendor risk assessments, bug bounty program facilitation, and maintaining security and privacy standards across the company.
Requirements:
- Bachelor's degree or higher in Computer Science or related field
- 5+ years of experience in product or application security and related software engineering roles
- Hands-on experience with AWS services including GuardDuty, CloudTrail log review, IAM, Security Groups, CloudFront, CloudFormation, S3, ECS, Lambda, DynamoDB, and RDS
- Proficiency in at least one programming language (Python, JavaScript, Node.js, or TypeScript)
- Strong understanding of testing practices and documentation
- Subject matter expertise in security best practices with ability to conduct rapid, accurate risk assessments aligned with company priorities
