Security Engineer II

We need to produce HTML fragment with sections: About the role? The posting includes description: "What We Do", "What You'll Do", "What We Believe are Important for This Role", "What We Value", "How We Support You", compensation info. We need headings:

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). Use only those headings if content exists. We need to map content accordingly. We have: - About the role: could be the introductory paragraph about Mapbox and the role? The posting starts with description of Mapbox then "Mapbox is looking for a Senior Software Engineer to join our Security & Compliance team." That could be "About the role". We'll include that as prose

. - Responsibilities: "What You'll Do" list of duties. Use

• . - Requirements/Qualifications: "What We Believe are Important for This Role" includes degree, experience, AWS services, proficiency, expertise. Could be Requirements or Qualifications. We'll put as Requirements maybe. - Skills: maybe "Proficiency in a programming language..." but that's part of requirements. Could combine. - Benefits: "How We Support You" list of benefits. Use
  • . - Pay: compensation range given. Use

    maybe. - Schedule: mention on-call rotation, flexible hours, hybrid/remote options. Could be Schedule. We must not create sections with filler like "commensurate with experience". We have actual content. We must not repeat job title as heading. No Job ID. We must remove boilerplate: E-Verify, privacy policy, EEO, etc. Also remove duplicated lines. We need to preserve all substantive information. Ensure we don't lose any details. Let's extract content: Intro about Mapbox: "Mapbox is the leading real-time location platform for a new generation of location-aware businesses. Mapbox is the only platform that equips organizations with the full set of tools to power the navigation of people, packages, and vehicles everywhere. More than 4 million registered developers have chosen Mapbox because of the platform’s flexibility, security and privacy compliance. Organizations use Mapbox applications, data, SDKs and APIs to create customized and immersive experiences that delight their customers." Then role intro: "Mapbox is looking for a Senior Software Engineer to join our Security & Compliance team. As a member of our diverse and globally distributed team, you’ll help all Mapbox engineers build secure-by-default systems. Engineers on the Security & Compliance team build scanning and threat detection systems to monitor Mapbox’s cloud deployment (AWS-native, mainly container-based, 7 global regions including China) and other digital assets. They conduct risk assessments of new vendor integrations and product launches, and facilitate a bug bounty program that leverages the diverse expertise of a global community of security researchers. Lastly, they build and maintain core standards around security, quality, and privacy—reflected in our compliance certifications—and the automation to monitor and enforce these standards across Mapbox." That's about the role. Responsibilities (What You'll Do): list: - Conduct AWS security reviews (deep dive into our AWS environment to validate security best practices are being followed). - Make security improvements recommendations and work with our production support teams to implement security improvement in AWS. - Partner with the Lead Security Architect in fixing custom-built security tools bots. - Conduct in-depth security reviews of application code, working closely with developers to code securely from the outset and address issues early during coding and testing phases. - Partner with internal product teams to implement a secure-by-default design into their own products. - Participate in an on-call rotation to ensure our systems remain available to customers 24/7. Team members alternate as the on-call primary responder, which may require immediate response outside normal working hours, including weekends. We'll put each as

  • . Requirements/Qualifications (What We Believe are Important for This Role): - Bachelor’s or higher degree in Computer Science or similar - 5+ years of experience in product or application security and related software engineering roles - Experience with AWS services like GuardDuty, CloudTrail log review, IAM, Security Groups, CloudFront, CloudFormation, S3, ECS, Lambda, DynamoDB and RDS. - Proficiency in a programming language (e.g. Python, JavaScript or Node.js or TypeScript), testing practices, and documentation. - Subject matter expertise in security best practices and the ability to quickly make correct risk assessments that prioritize the overall benefit to the company. We'll put as
    • . Benefits (How We Support You): list: - Hybrid/Remote Options: Enjoy flexibility to work comfortably from home or periodically from an office where applicable. - Comprehensive Healthcare: Private medical coverage for you and your dependents. - Family-First Support: Generous maternity and paternity leave policies to support your growing family. - Fertility & Family Building: Inclusive fertility support. Grow your family on your terms. - Lifestyle Spending Account: Contributions to support your health, wellness, and personal growth. - Balance & Brainpower: Mental health support for you and your dependents. - Rest & Recharge: Flexible paid time away, company holidays, and generous absence policies. - Time Off to Give Back: Dedicated paid volunteering time in addition to your standard PTO. - Invest & Grow: Retirement plans with competitive matching. We'll put as
      • . Pay: "Our annual base compensation for this role ranges from $160,650 - $217,350 for most US locations and 5% to 10% higher for US locations with a higher cost of labor. Job level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location. Please discuss your specific work location with your recruiter for more information." We'll put as

        maybe under Pay heading. Schedule: mention on-call rotation (already in responsibilities) and hybrid/remote options (benefits). Could also mention flexible hours. But we already have on-call in responsibilities; schedule could be about working hours? The posting mentions "Hybrid/Remote Options" and "on-call rotation". Could create Schedule section with those details: hybrid/remote, on-call rotation requiring immediate response outside normal hours including weekends. We'll keep schedule separate. But we must not duplicate content. If we put on-call in responsibilities, we shouldn't repeat in schedule. However schedule could mention hybrid/remote options and flexible hours. The posting says "Hybrid/Remote Options: Enjoy flexibility to work comfortably from home or periodically from an office where applicable." That's already in benefits. Could move to schedule? But benefits already includes that. We could keep schedule minimal: maybe mention that role may require on-call rotation outside normal hours, including weekends. But that's already in responsibilities. To avoid duplication, we could omit schedule section if no unique content. However the instruction: "Prefer a few substantive sections over many thin ones." So we could omit Schedule if not needed. But we need to include sections only when posting has real specific content. The posting does mention on-call rotation and hybrid/remote; but those are covered elsewhere. If we omit Schedule, we might lose the mention of on-call rotation? It's already in responsibilities. Hybrid/remote is in benefits. So schedule not needed. Thus sections: About the role, Responsibilities, Requirements, Benefits, Pay. We need headings exactly as given: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We can choose subset. We'll use About the role, Responsibilities, Requirements, Benefits, Pay. Make sure not to include empty sections. Now produce HTML fragment:

        About the role

        ...

        Responsibilities

        • ...
        ...

        Requirements

        • ...
        ...

        Benefits

        • ...
        ...

        Pay

        ...

        Check that we didn't include any boilerplate like E-Verify, privacy policy, etc. Now craft the prose. About the role paragraph: combine the introductory Mapbox description and role description. Let's write:

        Mapbox is the leading real-time location platform for a new generation of location-aware businesses. Mapbox is the only platform that equips organizations with the full set of tools to power the navigation of people, packages, and vehicles everywhere. More than 4 million registered developers have chosen Mapbox because of the platform’s flexibility, security and privacy compliance. Organizations use Mapbox applications, data, SDKs and APIs to create customized and immersive experiences that delight their customers. Mapbox is looking for a Senior Software Engineer to join our Security & Compliance team. As a member of our diverse and globally distributed team, you’ll help all Mapbox engineers build secure-by-default systems. Engineers on the Security & Compliance team build scanning and threat detection systems to monitor Mapbox’s cloud deployment (AWS-native, mainly container-based, 7 global regions including China) and other digital assets. They conduct risk assessments of new vendor integrations and product launches, and facilitate a bug bounty program that leverages the diverse expertise of a global community of security researchers. Lastly, they build and maintain core standards around security, quality, and privacy—reflected in our compliance certifications—and the automation to monitor and enforce these standards across Mapbox.

        That's fine. Responsibilities list: each bullet as li. Make sure to keep punctuation. Responsibilities: - Conduct AWS security reviews (deep dive into our AWS environment to validate security best practices are being followed). - Make security improvements recommendations and work with our production support teams to implement security improvement in AWS. - Partner with the Lead Security Architect in fixing custom-built security tools bots. - Conduct in-depth security reviews of application code, working closely with developers to code securely from the outset and address issues early during coding and testing phases. - Partner with internal product teams to implement a secure-by-default design into their own products. - Participate in an on-call rotation to ensure our systems remain available to customers 24/7. Team members alternate as the on-call primary responder, which may require immediate response outside normal working hours, including weekends. We'll put each as
      • . Requirements list: - Bachelor’s or higher degree in Computer Science or similar - 5+ years of experience in product or application security and related software engineering roles - Experience with AWS services like GuardDuty, CloudTrail log review, IAM, Security Groups, CloudFront, CloudFormation, S3, ECS, Lambda, DynamoDB and RDS. - Proficiency in a programming language (e.g. Python, JavaScript or Node.js or TypeScript), testing practices, and documentation. - Subject matter expertise in security best practices and the ability to quickly make correct risk assessments that prioritize the overall benefit to the company. Benefits list: - Hybrid/Remote Options: Enjoy flexibility to work comfortably from home or periodically from an office where applicable. - Comprehensive Healthcare: Private medical coverage for you and your dependents. - Family-First Support: Generous maternity and paternity leave policies to support your growing family. - Fertility & Family Building: Inclusive fertility support. Grow your family on your terms. - Lifestyle Spending Account: Contributions to support your health, wellness, and personal growth. - Balance & Brainpower: Mental health support for you and your dependents. - Rest & Recharge: Flexible paid time away, company holidays, and generous absence policies. - Time Off to Give Back: Dedicated paid volunteering time in addition to your standard PTO. - Invest & Grow: Retirement plans with competitive matching. Pay paragraph:

        Our annual base compensation for this role ranges from $160,650 - $217,350 for most US locations and 5% to 10% higher for US locations with a higher cost of labor. Job level and actual compensation will be decided based on factors including