🎁 Before you apply, rehearse this interview. Create your free WorkMundi account and get an Interview Training on HelpsYouSpeak — no cost, no card. I want my training →
Job Title: Staff Security Engineer Job description: We are seeking an Infrastructure Security Engineer to partner with SRE and infrastructure teams to embed security into our infrastructure deployment and operations. This role will be responsible for creating and validating secure configuration and deployment templates, building audit and detection automation, and ensuring our infrastructure is protected against evolving threats. The ideal candidate combines deep technical expertise in infrastructure technologies with security automation skills and a collaborative approach to working with engineering teams. Key Responsibilities SRE & Infrastructure Team Collaboration Partner with SRE and infrastructure teams to integrate security into infrastructure workflows, deployment pipelines, and operational practices Create and validate secure configuration templates for Terraform, CloudFormation, Ansible, and other infrastructure automation tools Develop deployment templates that embed security controls by default for common infrastructure patterns (VPCs, security groups, IAM roles, compute instances) Review and approve infrastructure code providing security guidance and validation before production deployment Conduct security assessments of infrastructure designs and deployment patterns in collaboration with SRE teams Establish security guardrails that enable infrastructure teams to move quickly while maintaining security standards Audit & Detection Automation Build automated audit systems to continuously validate infrastructure configurations against security baselines and compliance requirements Develop detection automation for identifying security misconfigurations, policy violations, and anomalous infrastructure changes Implement policy-as-code frameworks using Open Policy Agent (OPA), AWS Config Rules, Azure Policy, or Sentinel to enforce security standards Create automated remediation workflows for common security violations and configuration drift Build compliance validation automation to continuously assess infrastructure against CIS benchmarks, SOC 2, and other frameworks Develop security metrics and dashboards providing visibility into infrastructure security posture and trends Security Architecture & Design Design and implement security architectures for hybrid and multi-cloud environments (AWS, Azure, GCP) Develop network security architectures including network segmentation, zero trust principles, and micro-segmentation strategies Build security baselines and hardening standards for servers, endpoints, containers, and cloud resources based on CIS benchmarks and industry best practices Design secure landing zones and account structures for cloud environments with appropriate guardrails and security controls Implement defense-in-depth strategies across network, host, application, and data layers Conduct security architecture reviews for infrastructure changes, new deployments, and technology adoption Cloud & Infrastructure Security Implement and manage cloud security controls including security groups, NACLs, WAF, cloud firewalls, and encryption services Configure cloud security posture management (CSPM) tools to continuously assess and remediate misconfigurations Deploy and manage container security for Docker, Kubernetes, and container orchestration platforms Implement infrastructure-as-code security scanning and policy enforcement for Terraform, CloudFormation, and other IaC tools Secure cloud-native services including serverless functions, managed databases, object storage, and API gateways Manage secrets and encryption keys using vaults, KMS, and secure key management practices Security Automation & Infrastructure as Code Develop and maintain security automation using Python, PowerShell, Bash, or Go for audit, detection, and remediation tasks Create reusable IaC security modules and templates for Terraform, CloudFormation, or Pulumi that SRE teams can leverage Implement IaC scanning and validation in CI/CD pipelines using tools like Checkov, Terrascan, tfsec, or custom validators Build security policy as code using tools like Open Policy Agent (OPA), Sentinel, AWS Config Rules, or Azure Policy Automate security testing of infrastructure deployments including configuration validation and compliance checks Collaborate with SRE teams to integrate security automation into GitOps workflows and deployment pipelines Compliance & Governance Support compliance initiatives for SOC 2, ISO 27001, PCI-DSS, HIPAA, or other frameworks Conduct infrastructure security audits and assessments against security standards Document security architectures and maintain system security plans (SSPs) Develop runbooks and procedures for security operations and incident response Generate compliance reports demonstrating security control effectiveness Collaboration & Advisory Work embedded with SRE teams to understand infrastructure patterns, deployment workflows, and operational needs Partner with infrastructure teams on architecture reviews, technology evaluations, and capacity planning with security considerations Provide security guidance on infrastructure projects, deployment strategies, and architectural decisions in real-time Train SRE and infrastructure staff on secure configuration practices, security tooling, and threat awareness Enable self-service security by creating documentation, runbooks, and templates that infrastructure teams can use independently Collaborate with peer security teams on application security, identity management, and security operations to ensure holistic coverage Required Qualifications Experience 5+ years of hands-on experience in infrastructure security, network security, or systems engineering with security focus 3+ years working with cloud platforms (AWS, Azure, or GCP) with focus on security architecture and implementation Proven experience implementing security controls across hybrid environments (on-premises and cloud) Strong background in network security including firewalls, segmentation, VPNs, and network monitoring Experience with security hardening of Windows and Linux systems Technical Skills Cloud Platforms: Deep knowledge of AWS, Azure, or GCP security services, IAM, networking, and security architecture Infrastructure as Code: Strong experience with Terraform, CloudFormation, Ansible, or similar tools including module/template development Policy as Code: Proficiency with Open Policy Agent (OPA), Sentinel, AWS Config Rules, Azure Policy, or similar frameworks Scripting & Automation: Strong skills in Python, PowerShell, Bash, or Go for building security automation and tooling Network Security: Expertise with firewalls (Palo Alto, Cisco, Fortinet), network segmentation, VPNs, and IDS/IPS Operating Systems: Strong knowledge of Windows and Linux administration, security hardening, and system internals Container Security: Knowledge of Docker, Kubernetes security, and container orchestration CI/CD Pipelines: Experience integrating security tools into GitLab CI, GitHub Actions, Jenkins, or similar platforms Security Tools: Hands-on experience with vulnerability scanners (Nessus, Qualys), CSPM tools (Wiz, Prisma Cloud), EDR/XDR platforms Monitoring & Logging: Experience with SIEM, log aggregation (Splunk, ELK), and security monitoring platforms Knowledge & Competencies Security Architecture: Understanding of defense-in-depth, zero trust, and security architecture principles Security Frameworks: Familiarity with NIST Cybersecurity Framework, CIS Controls, MITRE ATT&CK Compliance: Knowledge of SOC 2, ISO 27001, PCI-DSS, HIPAA, or other regulatory frameworks TCP/IP & Networking: Strong understanding of networking protocols, routing,
Here's how to pick the right one and stand out in your application.
144.883Jobs
31.687IN
81%EN
That number is real. WorkMundi's database shows 144,883 open engineer roles across the world. India has the most with 31,687 jobs, followed by the United States with 30,084. If you just finished reading one job ad and felt paralyzed by choice, you're not alone—but this scale is actually an advantage. It means you can afford to be selective.
Start by geography and language. The majority of engineer ads—117,837 of them—have the job posting text written in English. Use that as one filter, but remember: the ad text language tells you nothing about whether the role actually requires you to speak English day-to-day. Read the job description carefully. Then check which countries have the volume you're targeting. Singapore, Poland, and Australia round out the top five after India and the US.
Next, learn who's hiring. Accenture has posted 2,801 engineer roles. andurilindustries, speechify, and jobgether are also actively recruiting. If you're applying to one of these names, research their hiring patterns and interview style before you apply. That homework pays off.
When you interview, expect the question every engineer hears: 'Tell me about a time you had to debug a problem that wasn't in your job description.' Have a specific story ready—not a general one. Name the tools, the deadline pressure, and what you learned. Hiring managers listen for whether you see problem-solving as part of the role itself, not a favour.