SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Mapbox is seeking a Senior Software Engineer to join the Security & Compliance team. You will help Mapbox engineers build secure-by-default systems across a globally distributed, AWS-native cloud deployment spanning 7 global regions. The Security & Compliance team builds scanning and threat detection systems, conducts risk assessments for vendor integrations and product launches, operates a bug bounty program, and maintains core security, quality, and privacy standards reflected in compliance certifications.
Key responsibilities include:
- Conducting AWS security reviews to validate best practices across the Mapbox environment
- Making security improvement recommendations and working with production support teams to implement changes
- Partnering with the Lead Security Architect to fix custom-built security tools and bots
- Conducting in-depth security reviews of application code, working closely with developers to embed secure coding practices early
- Partnering with internal product teams to implement secure-by-default design principles
- Participating in an on-call rotation to ensure 24/7 system availability, including potential weekend/off-hours response
You will be part of a diverse, globally distributed team focused on scalable, engineering-driven security practices. The role emphasizes teaching, learning, and supporting employees to succeed in their function and at the company.
REQUIREMENTS:
- Bachelor's degree or higher in Computer Science or similar field
- 5+ years of experience in product or application security and related software engineering roles
- Experience with AWS services: GuardDuty, CloudTrail log review, IAM, Security Groups, CloudFront, CloudFormation, S3, ECS, Lambda, DynamoDB, and RDS
- Proficiency in a programming language (Python, JavaScript, Node.js, or TypeScript)
- Strong testing practices and documentation skills
- Subject matter expertise in security best practices with ability to make correct risk assessments that prioritize overall company benefit
