Security Engineer
San Francisco, CA
Mapbox
APIs and SDKs for AI-powered maps, location search, turn-by-turn navigation, and geospatial data in mobile or web apps. Get started for free.Maps are no longer static. Our maps represent the ever-evolving world, accessing, aggregating, and adapting anonymous data from millions of sensors and phones in real-time. Mapbox has the exciting opportunity to power devices and products across the next frontier in location-based data, such as Internet of Things and AR/VR.
Whether you’re watching the delivery of your grocery order on Instacart, looking at a gym on ClassPass, sending snaps on Snapchat, tracking your personal best on Strava, monitoring your gas budget on Metromile, or checking today’s forecast on The Weather Channel, Mapbox is the location and maps within those apps. We’re changing how people move by mapping the world in real-time. We are the developer platform for location.
What We Do
The Security & Compliance team ensures that Mapbox is a secure and privacy-minded location platform. We take an engineering-driven approach to keeping our employees and millions of end-users safe from real world threats. Our services empower the company to move fast in a highly competitive market with a risk-informed and automation-driven approach to security. We provide the tools, information, and training to help every team at Mapbox understand and own their security surface area, and we earn the trust of Mapbox customers by attaining certifications that attest to the maturity of our security and operations.
What You’ll Do
Mapbox is looking for a talented and experienced security engineer to join our team. As a member of the Security & Compliance team, you can expect to work in a highly visible, cross-functional role. As an engineer on this team, you’ll play an advisory role across the whole company, and you’ll help all Mapbox engineers build secure-by-default systems and triage and mend vulnerabilities on their systems. Engineers on the Security & Compliance team build scanning and threat detection systems to monitor Mapbox’s cloud deployment (AWS-native, mainly container-based, 7 global regions including China) and other digital assets. They train all Mapbox employees on security best practices, conduct risk assessments of new vendor integrations and product launches, and facilitate a bug bounty program that leverages the diverse expertise of a global community of security researchers. Lastly, they build and maintain core standards around security, quality, and privacy—reflected in our compliance certifications—and the automation to monitor and enforce these standards across Mapbox.
We’re excited to share our passion for scalable, engineering-driven, security with you, and for your perspective to help shape our team’s goals. You will be responsible for contributing to, operating, and improving all things related to our security and compliance services. In this role, you can expect to:
- Build well-architected and relevant cloud-based data classification and threat detection systems that integrate with our internal platform for assessing and resolving risk vectors
- Support internal customers of security and compliance services by shipping features to address their needs, consulting on pain points, and designing improvements to our internal team interfaces
- Partner with other internal product teams to implement a secure-by-default design into their own products
- Conduct reviews, train employees, and advise on matters related to security and compliance across Mapbox
- Partner with Mapbox engineering teams to understand and resolve security incidents that arise on their services
- Represent Mapbox’s security posture and the maturity of our operations to customers and in public settings like conferences
- Promote a culture of operational excellence by meticulously testing and monitoring our team’s systems and code, and being on-call to support the health of our services
- Design systems and make decisions that will keep pace with the rapid growth of Mapbox
- Document your work and decision-making processes, and lead presentations and discussions in a way that is easy for others to understand
- Uphold a culture of collaboration, transparency, creativity, inclusion, and data-driven decisions
What We Believe are Important Traits for This Role
- Proven ability to design and develop low-friction, innovative, and reliable services that integrate security into the fabric of a cloud-based product
- Clear and persuasive communication of complex and critical information to a broad audience
- Subject matter expertise in security best practices and the ability to quickly make correct risk assessments that prioritize the overall benefit to the company
- Track record of building self-service and high-quality tools with a customer-driven mindset
- A desire to share your expertise through documentation, mentorship, and both written and vocal discussion
- A personal drive to expand your comfort zone by exploring new and/or unfamiliar tasks and domains
- A desire to work with individuals with diverse backgrounds, perspectives, and experiences
- Autonomy and proactivity around driving work to completion in the face of ambiguity
- Strong proficiency in a programming language (e.g. Node.js or Python), testing practices, and thorough documentation
- Experience with our tech stack—Node.js, Docker, AWS (CloudFormation, ECS, Lambda, DynamoDB, and more) is a plus
- Experience with SOC, GDPR, and ISO compliance standards
- 5+ years of experience in product or infrastructure security related software engineering roles
- Bachelor’s or higher degree in Computer Science
What We Value
In addition to our core values, which are not unique to this position and are necessary for Mapbox leaders:
- We value high-performing creative individuals who dig into problems and opportunities.
- We believe in individuals being their whole selves at work. We commit to this through supportive health care, parental leave, flexibility for the things that come up in life, and innovating on how we think about supporting our people.
- We emphasize an environment of teaching and learning to equip employees with the tools needed to be successful in their function and the company.
- We strongly believe in the value of growing a diverse team and encourage people of all backgrounds, genders, ethnicities, abilities, and sexual orientations to apply.
Mapbox is an EEO Employer - Minority/Female/Veteran/Disabled/Sexual Orientation/Gender Identity
Tags: Automation AWS Cloud Compliance Computer Science Docker DynamoDB GDPR Internet of Things Lambda Monitoring Node.js Privacy Python Threat detection Vulnerabilities
Perks/benefits: Career development Conferences Parental leave Startup environment Transparency
More jobs like this
Explore more InfoSec / Cybersecurity career opportunities
Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.
- Open Security Operations Engineer jobs
- Open Senior Cyber Security Engineer jobs
- Open Information Security Specialist jobs
- Open Manager Pentest H/F jobs
- Open Cyber Security Architect jobs
- Open Cyber Security Specialist jobs
- Open Staff Security Engineer jobs
- Open Principal Security Engineer jobs
- Open Product Security Engineer jobs
- Open Senior Information Security Analyst jobs
- Open Information Systems Security Officer (ISSO) jobs
- Open Consultant infrastructure sécurité H/F jobs
- Open Chief Information Security Officer jobs
- Open IT Security Analyst jobs
- Open Cybersecurity Analyst jobs
- Open Consultant SOC / CERT H/F jobs
- Open Cybersecurity Consultant jobs
- Open Senior Information Security Engineer jobs
- Open Security Specialist jobs
- Open Cybersecurity Specialist jobs
- Open Senior Penetration Tester jobs
- Open Security Researcher jobs
- Open Sr. Security Engineer jobs
- Open Senior Security Architect jobs
- Open Security Operations Analyst jobs
- Open Clearance-related jobs
- Open ISO 27001-related jobs
- Open Windows-related jobs
- Open Application security-related jobs
- Open Network security-related jobs
- Open Agile-related jobs
- Open Pentesting-related jobs
- Open Vulnerability management-related jobs
- Open GCP-related jobs
- Open SaaS-related jobs
- Open Analytics-related jobs
- Open CISA-related jobs
- Open IAM-related jobs
- Open Threat intelligence-related jobs
- Open APIs-related jobs
- Open Security assessment-related jobs
- Open Java-related jobs
- Open IDS-related jobs
- Open Security Clearance-related jobs
- Open DevOps-related jobs
- Open Malware-related jobs
- Open Kubernetes-related jobs
- Open EDR-related jobs
- Open CEH-related jobs
- Open IPS-related jobs