Senior Software Engineer, Security & Compliance at Mapbox

Mapbox is the leading real-time location platform for a new generation of location-aware businesses. Mapbox is the only platform that equips organizations with the full set of tools to power the navigation of people, packages, and vehicles everywhere.

What You'll Do

We’re excited to share our passion for scalable, engineering-driven, security with you, and for your perspective to help shape our team’s goals. You will be responsible for contributing to, operating, and improving all things related to our security and compliance services.

• Conduct AWS security reviews (deep dive into our AWS environment to validate security best practices are being followed).

• Make security improvements recommendations and work with our production support teams to implement security improvements in AWS.

• Partner with the Lead Security Architect in fixing custom-built security tools and bots.

• Conduct in-depth security reviews of application code, working closely with developers to code securely from the outset and address issues early during coding and testing phases.

• Partner with internal product teams to implement a secure-by-default design into their own products.

• Participate in an on-call rotation to ensure our systems remain available to customers 24/7. Team members alternate as the on-call primary responder, which may require immediate response outside normal working hours, including weekends.

What We Believe are Important for This Role

• A Bachelor’s or higher degree in Computer Science or similar.

• 5+ years of experience in product or application security and related software engineering roles.

• Experience with AWS services like GuardDuty, CloudTrail log review, IAM, Security Groups, CloudFront, CloudFormation, S3, ECS, Lambda, DynamoDB, and RDS.

• Proficiency in a programming language (e.g., Python, JavaScript, Node.js, or TypeScript), testing practices, and documentation.

• Subject matter expertise in security best practices and the ability to quickly make correct risk assessments that prioritize the overall benefit to the company.