Senior InfoSec analyst on MongoDB's computer security incident response team in Gurugram, leading investigations end to end.

This hybrid Gurugram role was posted on 15 October 2026. The listing describes joining the Computer Security Incident Response Team to detect, investigate and respond to security events across corporate and cloud environments, acting as a technical lead on incidents, mentoring analysts, and working with Engineering, IT, Legal and Privacy teams to reduce risk. The listing states they want candidates based in Gurugram for the hybrid working model. Requirements include 5+ years in security operations, incident response, detection engineering or a related field, and hands-on experience leading incidents end to end including clear stakeholder communication during and after an event.

About MongoDB

MongoDB builds the document database of the same name and Atlas, its managed cloud database platform. MongoDB stores JSON-like documents instead of tables and rows, and Atlas adds managed hosting across the major clouds along with search, vector search, stream processing and sync features. The company has engineering and business teams in Gurugram and Bengaluru.

The Gurugram and Bengaluru centres cover product engineering, technical services, solutions architecture and go-to-market functions. The company's listings describe hybrid working for India-based roles and collaboration with teams in other countries. Learn more on MongoDB's website.

The role in plain terms

The technical-lead framing distinguishes this from a tier-2 analyst seat: you lead the incident, not just investigate your slice, and mentor other analysts. The stakeholder-communication requirement - during and after an event - is where senior incident responders differentiate; expect it to be probed. The Gurugram-based hybrid expectation is stated plainly in the listing, so candidates elsewhere should expect location questions.

The team and the work

Per the listing, the environment spans corporate and cloud, and the partner teams include Legal and Privacy as well as Engineering and IT - reflecting how modern incident response crosses technical and regulatory boundaries. False-positive triage skill is named in the listing.

What the employer asks for

These requirements are quoted from the employer's listing, kept in their exact words so eligibility details are not distorted:

5+ years in security operations, incident response, detection engineering, or a related field
Hands-on experience leading incidents end to end, including clear stakeholder communication during and after an event
Strong log analysis skills in a SIEM and fluency with EDR tools
Working knowledge of cloud security (AWS, GCP, or Azure), identity and access management, and SaaS security
Solid understanding of attacker techniques and frameworks such as MITRE ATT&CK
Ability to prioritize and make sound decisions under ambiguity and time pressure
Strong written communication, including incident reports and executive-ready summaries
Experience integrating LLM or AI tooling into security workflows, or assessing AI-related risk

Who this role suits

Security analysts with 5+ years in incident response or security operations who have led incidents end to end and can show clear stakeholder communication. Not for SOC analysts without incident-leadership experience, or detection engineers who prefer building over responding.

Practical notes

For senior IR roles, expect a full incident walkthrough: detection, scoping, containment, communication, postmortem. Be ready to discuss how you decide an alert is benign versus the start of an incident, and how you document that reasoning.

Working at MongoDB

Engineering roles at MongoDB India work on the database and the Atlas platform, including newer AI-application tooling. Customer-facing roles support enterprises evaluating and running MongoDB in production.

How to apply

Apply directly on the employer's site: Senior InfoSec Analyst at MongoDB. We found this listing on the Greenhouse public job board (mongodb.com), where it was posted on 15 Oct 2026 and was still open when we checked on 30 Oct 2026. Before applying, re-read the employer's own description in full, since eligibility details, deadlines and process steps can change at any time and the employer's page is always the final word. Tailor your resume to the specific requirements above rather than sending a generic one: mirror the skills and tools the listing names where you genuinely have them. A short, specific note on why this team and this problem interest you goes further than a long generic cover letter. Never pay a fee to apply or interview; genuine employers, including this one, do not charge candidates.

Related openings on GetFirstJob

If this role is not the right fit, these current openings are in a similar area:

We write and maintain this page from the employer's public listing and link straight to their application page. We do not act as a recruiter, and applying is always free. If the link above stops working, the role has likely been filled.

This is our short summary of the employer's listing. The full description, eligibility and deadline are on the employer's page.