Senior Product Security Engineer

About Monte Carlo

As businesses increasingly rely on data + AI for competitive advantage, reliability has become a non-negotiable. Named a CBInsights AI100 company and described by Forbes as the "New Relic for data", Monte Carlo supports some of the world's most prestigious companies, including Fox, Roche, Honeywell, and CreditKarma to deliver trustworthy data + AI at scale.

Backed by Accel, Redpoint Ventures, Notable Capital, ICONIQ Growth, and Salesforce Ventures, Monte Carlo is powering the future of reliable data + AI.

About the Role:

Monte Carlo is seeking an exceptional Product Security Engineer to lead our security engineering efforts in a cloud-first environment. Your role will be central to maintaining and enhancing our vulnerability management program, developing security automation, and managing security alerting/reporting. You will also actively participate in new features and code reviews to support our Engineering team.

This position demands a comprehensive understanding of AWS security, proficiency in secure Python development, and expertise in security automation. Experience in DevSecOps and infrastructure security is a must-have. Familiarity with AI tools is a nice-to-have and will help you better support evolving ML/AI-driven initiatives.

Here’s what you’ll be doing:

• Spearheading security engineering in a cloud-first environment.

• Enhancing and maintaining our vulnerability management program.

• Developing and maintaining security automation.

• Managing security alerting and reporting systems.

• Contributing to Engineering efforts via code reviews and security assessments.

• Supporting security for infrastructure and DevSecOps workflows end-to-end.

We’re excited about you because you have:

• In-depth knowledge of AWS security.

• A documented background in secure Python development and security automation.

• Strong experience in DevSecOps and infrastructure security practices.

• Experience with SIEM tools such as Splunk, Panther, or Datadog.

• A sense of urgency, an ownership mindset, self-starter qualities, and a strong customer focus.

• Excellent written and verbal communication skills.

• An ability to work autonomously, think strategically, and make decisions with conviction.

Other things that excite us:

• Experience working with AI tools and security implications for ML/AI infrastructure.

• Security experience in GCP/Azure.

• Experience in operating/maintaining a Vulnerability Management program.

• Familiarity with SCA tooling (GitHub Advanced Security, Orca, Wiz, etc).

• Basic understanding of SOC 2, ISO 27001, and/or NIST 800-53.

• Red/Blue/Purple team experience for aiding in 3rd-party pentest scoping.

What this role is NOT:

• Developing customer-facing features (frontend or backend) within the product.

• Running internal red/purple team activities.

Additional Information:

This role will receive a competitive salary, benefits, and equity package. The salary is only for US-based employees and will be aligned with the range below.

Various factors, including a candidate’s professional background and experience, are considered when determining compensation. Final offer amounts may vary from the amounts listed above.

#LI-REMOTE

#BI-REMOTE

Come As You Are

Equality is a core tenet of Monte Carlo's culture. We are committed to building an inclusive global team that represents a variety of backgrounds, perspectives, beliefs, and experiences. 

Monte Carlo is an equal-opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

We are proud to be recognized for our world-class employee experience:

Monte Carlo Named to American's Most Loved Workplace List 2024

Monte Carlo Named an Inc. Best Workplace for 2024

Monte Carlo Named A Top 20 ORG For Venture Capital Funded Companies, Spring 2024

Monte Carlo Named A Top 5 ORG in San Francisco, Spring 2024