Senior Product Security Engineer

About Monte Carlo

As businesses increasingly rely on data + AI for competitive advantage, reliability has become a non-negotiable. Named a CBInsights AI100 company and described by Forbes as the "New Relic for data", Monte Carlo supports some of the world's most prestigious companies, including Fox, Roche, Honeywell, and CreditKarma to deliver trustworthy data + AI at scale.

Backed by Accel, Redpoint Ventures, Notable Capital, ICONIQ Growth, and Salesforce Ventures, Monte Carlo is powering the future of reliable data + AI.

About the Role:

Monte Carlo is seeking an exceptional Product Security Engineer to lead our security engineering efforts in a cloud-first environment. Your role will be central to maintaining and enhancing our vulnerability management program, developing security automation, and managing security alerting/reporting. You will also actively participate in new features and code reviews to support our Engineering team.

This position demands a deep understanding of AWS security, secure Python development, and security automation. Strong DevSecOps experience—especially embedded within infrastructure and Terraform repositories—is a must. Familiarity with AI tools and their security implications is a nice-to-have as we expand into ML/AI-driven areas.

Here’s what you’ll be doing:

• Leading security engineering in a cloud-native environment.

• Driving secure practices across our infrastructure and Terraform-as-Code workflows.

• Enhancing and maintaining our vulnerability management program.

• Developing and maintaining scalable security automation.

• Managing security alerting and reporting systems.

• Participating in code reviews and engineering collaboration to drive secure-by-design thinking.

We’re excited about you because you have:

• In-depth knowledge of AWS security.

• A strong background in secure Python development and security automation.

• Hands-on DevSecOps experience embedded in infrastructure-level systems, including Terraform repositories.

• Experience with SIEM tools such as Splunk, Panther, or Datadog.

• A strong sense of ownership, a bias for action, and a collaborative mindset.

• Excellent communication skills and a strategic approach to solving security challenges.

Other things that excite us:

• Familiarity with AI tools and security in ML/AI environments.

• Security experience in GCP or Azure.

• Experience managing a Vulnerability Management program.

• Familiarity with SCA tooling (GitHub Advanced Security, Orca, Wiz, etc).

• Understanding of SOC 2, ISO 27001, and/or NIST 800-53 compliance frameworks.

• Red/Blue/Purple team experience for supporting 3rd-party pentest scoping.

What this role is NOT:

• Building customer-facing features (frontend or backend).

• Running internal red/purple team exercises.

Additional Information:

This role will receive a competitive salary, benefits, and equity package. The salary is only for US-based employees and will be aligned with the range below.

Various factors, including a candidate’s professional background and experience, are considered when determining compensation. Final offer amounts may vary from the amounts listed above.

#LI-REMOTE

#BI-REMOTE

Come As You Are

Equality is a core tenet of Monte Carlo's culture. We are committed to building an inclusive global team that represents a variety of backgrounds, perspectives, beliefs, and experiences. 

Monte Carlo is an equal-opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

We are proud to be recognized for our world-class employee experience:

Monte Carlo Named to American's Most Loved Workplace List 2024

Monte Carlo Named an Inc. Best Workplace for 2024

Monte Carlo Named A Top 20 ORG For Venture Capital Funded Companies, Spring 2024

Monte Carlo Named A Top 5 ORG in San Francisco, Spring 2024