MongoDB Support Engineer (Security & Patching)

HCLTech is a global technology company, home to 219,000+ people across 54 countries, delivering industry-leading capabilities centered on digital, engineering and cloud, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of $13+ billion.

For more information on how we process your personal data, please refer to HCLTech’ s Candidate Data Privacy Notice.

JD: MongoDB Support Engineer (Security & Patching)

(Patching & Vulnerability Management Track)

Purpose of the role-

Provide source-level MongoDB engineering combined with cybersecurity expertise to assess, triage, and remediate vulnerabilities and complex bugs under a remote L3 support model, meeting defined initial-response SLAs (P1: 4h / P2: 12h / P3: 24h).

Key responsibilities-

• Triage reported vulnerabilities and complex bugs escalated from L1/L2, assessing severity using CVSS (or equivalent) scoring.
• Assess exploitability and real-world risk of identified vulnerabilities (e.g., RCE, authentication bypass, privilege escalation, data exposure).
• Develop or source safe remediation paths — patches, workarounds, or configuration mitigations — for client teams to apply (no direct production access).
• Escalate confirmed product-level defects within MongoDB engineering channels where a vendor-side fix isn't available.
• Meet initial-response SLAs: acknowledge and begin work on P1 within 4 hours, P2 within 12 hours, P3 within 24 hours of ticket submission.
• Provide horizon-scanning input to monthly governance meetings known upcoming vulnerabilities, patching guidance, version-change security implications.
• Document remediation steps clearly enough for execution by a client team with no prior context on the specific issue.

Required experience-

• Hands-on MongoDB experience at the source-code / internals level (not purely operational/administrative).
• Demonstrated cybersecurity background: vulnerability assessment, CVSS scoring, exploitability analysis, and safe remediation design.
• Experience responding to time-bound severity-tiered SLAs in a production support context.
• Comfortable working without direct production access — remediation guidance must be actionable by others.
• Financial services or other regulated-industry experience preferred, given data-sensitivity constraints (no client data may leave client premises).