HCLTech
MongoDB Support Engineer (Security & Patching)
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
HCLTech is a global technology company, home to 219,000+ people across 54 countries, delivering industry-leading capabilities centered on digital, engineering and cloud, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of $13+ billion.
For more information on how we process your personal data, please refer to HCLTech’s Candidate Data Privacy Notice.
MongoDB Support Engineer (Security & Patching)
Purpose of the role
Provide source-level MongoDB engineering combined with cybersecurity expertise to assess, triage, and remediate vulnerabilities and complex bugs under a remote L3 support model, meeting defined initial-response SLAs (P1: 4h / P2: 12h / P3: 24h).
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Key responsibilities
- Triage reported vulnerabilities and complex bugs escalated from L1/L2, assessing severity using CVSS (or equivalent) scoring.
- Assess exploitability and real-world risk of identified vulnerabilities (e.g., RCE, authentication bypass, privilege escalation, data exposure).
- Develop or source safe remediation paths — patches, workarounds, or configuration mitigations — for client teams to apply (no direct production access).
- Escalate confirmed product-level defects within MongoDB engineering channels where a vendor-side fix isn't available.
- Meet initial-response SLAs: acknowledge and begin work on P1 within 4 hours, P2 within 12 hours, P3 within 24 hours of ticket submission.
- Provide horizon-scanning input to monthly governance meetings known upcoming vulnerabilities, patching guidance, version-change security implications.
- Document remediation steps clearly enough for execution by a client team with no prior context on the specific issue.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Required experience
- Hands-on MongoDB experience at the source-code / internals level (not purely operational/administrative).
- Demonstrated cybersecurity background: vulnerability assessment, CVSS scoring, exploitability analysis, and safe remediation design.
- Experience responding to time-bound severity-tiered SLAs in a production support context.
- Comfortable working without direct production access — remediation guidance must be actionable by others.
- Financial services or other regulated-industry experience preferred, given data-sensitivity constraints (no client data may leave client premises).
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location