Software Development Engineer II, Security

Mapbox
Mapbox, US
On-siteCareer-pivot friendly

Who this role is best for

Geared toward mid-level security engineers comfortable with AWS-native systems and cross-functional collaboration, working in a US-based environment with global deployment responsibilities.

Best fit for

  • Candidates with mid-level seniority and AWS security toolchain experience
    — “Experience with AWS services like GuardDuty, CloudTrail log review, IAM, Security Groups
  • Individuals who can translate security standards into engineering practices
    — “Partner with internal product teams to implement a secure-by-default design
  • Professionals with a background in both code review and infrastructure security
    — “Conduct in-depth security reviews of application code... address issues early during coding

Things to consider

  • Compensation varies by US location cost of labor, up to 10% higher
    — “5% to 10% higher for US locations with a higher cost of labor
  • Requires security risk assessment expertise for vendor and product evaluations
    — “Conduct risk assessments of new vendor integrations and product launches

How to stand out

  • Highlight AWS security automation projects in your resume's technical achievements
    — “build scanning and threat detection systems to monitor Mapbox’s cloud deployment
  • Demonstrate experience with secure coding practices during technical interviews
    — “conduct in-depth security reviews of application code
  • Quantify impact of security improvements in past roles using metrics
    — “make security improvements recommendations... implement security improvement in AWS
Pace · SteadyCollaboration · HighAutonomy · HighDecision Impact · TeamLevel · Senior

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • security improvements
  • risk assessments
  • secure-by-default design
Typical background
software engineeringsecurity

Skills & requirements

Required

AWS SecurityApplication SecurityRisk AssessmentSecurity Tool Development

Preferred

Bug Bounty Program

Stack & domain

AWSPythonJavaScriptNode.jsTypeScriptSecurity

About the role

Original posting from Mapbox via Ashby

Mapbox is the leading real-time location platform for a new generation of location-aware businesses. Mapbox is the only platform that equips organizations with the full set of tools to power the navigation of people, packages, and vehicles everywhere. More than 4 million registered developers have chosen Mapbox because of the platform’s flexibility, security and privacy compliance. Organizations use Mapbox applications, data, SDKs and APIs to create customized and immersive experiences that delight their customers. 

WHAT WE DO

Mapbox is looking for a Senior Software Engineer to join our Security & Compliance team. As a member of our diverse and globally distributed team, you’ll help all Mapbox engineers build secure-by-default systems. Engineers on the Security & Compliance team build scanning and threat detection systems to monitor Mapbox’s cloud deployment (AWS-native, mainly container-based, 7 global regions including China) and other digital assets. They conduct risk assessments of new vendor integrations and product launches, and facilitate a bug bounty program that leverages the diverse expertise of a global community of security researchers. Lastly, they build and maintain core standards around security, quality, and privacy—reflected in our compliance certifications—and the automation to monitor and enforce these standards across Mapbox.

WHAT YOU'LL DO

We’re excited to share our passion for scalable, engineering-driven, security with you, and for your perspective to help shape our team’s goals. You will be responsible for contributing to, operating, and improving all things related to our security and compliance services. In this role, you can expect to:

  • Conduct AWS security reviews (deep dive into our AWS environment to validate security best practices are being followed).
  • Make security improvements recommendations and work with our production support teams to implement security improvement in AWS.
  • Partner with the Lead Security Architect in fixing custom-built security tools bots.
  • Conduct in-depth security reviews of application code, working closely with developers to code securely from the outset and address issues early during coding and testing phases.
  • Partner with internal product teams to implement a secure-by-default design into their own products.

WHAT WE BELIEVE ARE IMPORTANT FOR THIS ROLE

  • Bachelor’s or higher degree in Computer Science or similar
  • 5+ years of experience in product or application security and related software engineering roles
  • Experience with AWS services like GuardDuty, CloudTrail log review, IAM, Security Groups, CloudFront, CloudFormation, S3, ECS, Lambda, DynamoDB and RDS.
  • Proficiency in a programming language (e.g. Python, JavaScript or Node.js or TypeScript), testing practices, and documentation.
  • Subject matter expertise in security best practices and the ability to quickly make correct risk assessments that prioritize the overall benefit to the company.

 WHAT WE VALUE

In addition to our core values https://www.mapbox.com/about/values/, which are not unique to this position and are necessary for Mapbox leaders:

  • We value high-performing creative individuals who dig into problems and opportunities.
  • We believe in individuals being their whole selves at work. We commit to this through supportive health care, parental leave, flexibility for the things that come up in life, and innovating on how we think about supporting our people.
  • We emphasize an environment of teaching and learning to equip employees with the tools needed to be successful in their function and the company.
  • We strongly believe in the value of growing a diverse team and encourage people of all backgrounds, genders, ethnicities, abilities, and sexual orientations to apply.

Our annual base compensation for this role ranges from $161,500 - $218,500 for most US locations and 5% to 10% higher for US locations with a higher cost of labor. Job level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location. Please discuss your specific work location with your recruiter for more information.

By applying for this position, you acknowledge that you agree to the Mapbox Privacy Policy https://www.mapbox.com/legal/privacy which is linked here.

Mapbox participates in E-Verify to confirm employee work authorization. Please refer to the Notice of E-Verify Participation https://drive.google.com/file/d/1rVYht6vc6QJmVzwML1rlh3BFboC-JkGe/view?usp=drive_link and Right to Work https://drive.google.com/file/d/1Pnzz1t8ueq8iPftJ7kqPOGoTnD5mqi0H/view?usp=drive_link posters for more information.

We are committed to a fair and equitable hiring process. We do not discriminate against any protected class.

#LI-Remote

Source: Mapbox careers (Ashby)

Similar roles