Security Engineer II

About the role

Mapbox is the leading real-time location platform for a new generation of location-aware businesses. Mapbox equips organizations with the full set of tools to power the navigation of people, packages, and vehicles everywhere. As a Senior Cloud Security Engineer on the Security & Compliance team, you’ll help all Mapbox engineers build secure-by-default systems.

Engineers on the Security & Compliance team build scanning and threat detection systems to monitor Mapbox’s cloud deployment (AWS-native, mainly container-based, 7 global regions including China) and other digital assets. They conduct risk assessments of new vendor integrations and product launches, facilitate a bug bounty program leveraging a global community of security researchers, and build and maintain core standards around security, quality, and privacy—reflected in compliance certifications—along with the automation to monitor and enforce these standards.

Responsibilities

• Conduct AWS security reviews (deep dive into our AWS environment to validate security best practices are being followed).
• Make security improvement recommendations and work with production support teams to implement security improvements in AWS.
• Partner with the Lead Security Architect in fixing custom-built security tools and bots.
• Conduct in-depth security reviews of application code, working closely with developers to ensure secure coding from the outset and address issues early during coding and testing phases.
• Partner with internal product teams to implement a secure-by-default design into their products.

Requirements

• Bachelor’s or higher degree in Computer Science or similar.
• 5+ years of experience in product or application security and related software engineering roles.
• Experience with AWS services like GuardDuty, CloudTrail log review, IAM, Security Groups, CloudFront, CloudFormation, S3, ECS, Lambda, DynamoDB, and RDS.
• Proficiency in a programming language (e.g., Python, JavaScript, Node.js, or TypeScript), testing practices, and documentation.
• Subject matter expertise in security best practices and the ability to quickly make correct risk assessments that prioritize the overall benefit to the company.

Benefits

• Supportive health care, parental leave, and flexibility for life events.
• Environment of teaching and learning to equip employees with tools for success.
• Commitment to diversity, encouraging people of all backgrounds, genders, ethnicities, abilities, and sexual orientations to apply.

Pay

Annual base compensation for this role ranges from $161,500 to $218,500 for most US locations, with an additional 5% to 10% for higher-cost US locations. Job level and actual compensation will be decided based on qualifications, skills, prior relevant experience, potential impact, scope of role, and market demands.