What We Do

The Security & Compliance team ensures that Mapbox is a secure and privacy-minded location platform. We take an engineering-driven approach to keeping our employees and millions of end-users safe from real world threats. Our services empower the company to move fast in a highly competitive market with a risk-informed and automation-driven approach to security. We provide the tools, information, and training to help every team at Mapbox understand and own their security surface area, and we earn the trust of Mapbox customers by attaining certifications that attest to the maturity of our security and operations.

What you’ll do

Mapbox is looking for a talented and experienced security engineer to join our team. As a member of the Security & Compliance team, you can expect to work in a highly visible, cross-functional role. As an engineer on this team, you’ll play an advisory role across the whole company, and you’ll help all Mapbox engineers build secure-by-default systems and triage and mend vulnerabilities on their systems. Engineers on the Security & Compliance team build scanning and threat detection systems to monitor Mapbox’s cloud deployment (AWS-native, mainly container-based, 7 global regions including China) and other digital assets. They train all Mapbox employees on security best practices, conduct risk assessments of new vendor integrations and product launches, and facilitate a bug bounty program that leverages the diverse expertise of a global community of security researchers. Lastly, they build and maintain core standards around security, quality, and privacy—reflected in our compliance certifications—and the automation to monitor and enforce these standards across Mapbox.

We’re excited to share our passion for scalable, engineering-driven, security with you, and for your perspective to help shape our team’s goals. You will be responsible for contributing to, operating, and improving all things related to our security and compliance services. In this role, you can expect to:

• Build well-architected and relevant cloud-based threat detection systems that integrate with our internal platform for assessing and resolving risk vectors 
• Support internal customers of security and compliance services by shipping features to address their needs, consulting on pain points, and designing improvements to our internal team interfaces
• Conduct reviews, train employees, and advise on matters related to security and compliance across Mapbox 
• Partner with Mapbox engineering teams to understand and resolve security incidents that arise on their services
• Represent Mapbox’s security posture and the maturity of our operations to customers and in public settings like conferences 
• Promote a culture of operational excellence by meticulously testing and monitoring our team’s systems and code, and being on-call to support the health of our services
• Design systems and make decisions that will keep pace with the rapid growth of Mapbox
• Document your work and decision-making processes, and lead presentations and discussions in a way that is easy for others to understand
• Uphold a culture of collaboration, transparency, creativity, inclusion, and data-driven decisions

What we believe are important traits for this role

• Proven ability to design and develop low-friction, innovative, and reliable services that integrate security into the fabric of a cloud-based product
• Clear and persuasive communication of complex and critical information to a broad audience
• Track record of building self-service and high-quality tools with a customer-driven mindset
• A desire to share your expertise through documentation, mentorship, and both written and vocal discussion
• A personal drive to expand your comfort zone by exploring new and/or unfamiliar tasks and domains
• A desire to work with individuals with diverse backgrounds, perspectives, and experiences
• Autonomy and proactivity around driving work to completion in the face of ambiguity
• Strong proficiency in a programming language (e.g. Node.js or Python), testing practices, and thorough documentation
• Experience with our tech stack—Node.js, Docker, AWS (CloudFormation, ECS, Lambda, DynamoDB, and more) is a plus
• Experience with SOC, GDPR, and ISO compliance standards
• 5+ years of experience in product or infrastructure security related software engineering roles
• Bachelor’s or higher degree in Computer Science

In addition to our core values, which are not unique to this position and are necessary for Mapbox leaders:

• We value high-performing creative individuals who dig into problems and opportunities.
• We believe in individuals being their whole selves at work. We commit to this through supportive health care, parental leave, flexibility for the things that come up in life, and innovating on how we think about supporting our people.
• We emphasize an environment of teaching and learning to equip employees with the tools needed to be successful in their function and the company.
• We strongly believe in the value of growing a diverse team and encourage people of all backgrounds, genders, ethnicities, abilities, and sexual orientations to apply.

By applying for this position, you acknowledge that you have received the Mapbox Non-US Privacy Notice for applicants, which is linked here. Completing this application requires you to provide personal data, such as your name and contact information, which is mandatory for Mapbox to process your application. 

Mapbox is an EEO Employer - Minority/Female/Veteran/Disabled/Sexual Orientation/Gender Identity