🎁 Before you apply, rehearse this interview. Create your free WorkMundi account and get an Interview Training on HelpsYouSpeak — no cost, no card. I want my training →
We are seeking an experienced Security Architect to define and implement Hardware Security Module (HSM) and blockchain security controls and policies across our digital assets / tokenisation platforms. This role will lead security architecture, policy definition, threat modelling, and control assurance for both permissioned and permissionless blockchain models, including key management, key ceremonies, and operational security governance. HSM Architecture, Set-up & Control Design Own the end-to-end HSM security architecture: tenancy model, network placement, access patterns, and hardening requirements. Define and govern key management controls (generation, storage, usage, rotation, backup, recovery) and secure key ceremony procedures using HSMs. Specify separation-of-duties and operational safeguards (e.g., splitting physical access, remote access, and credential/PIN ownership across non-overlapping teams; logging of access requests; system hardening). Establish mutual authentication expectations between services and HSM-backed components, and define audit evidence requirements for HSM operations. Blockchain Security Policies & Standards Define / update blockchain security policies and standards that cover both permissioned and permissionless models Drive security architecture requirements for wallet/account management, smart contract lifecycle, node connectivity, and blockchain intelligence/observability components Threat Modelling, Risk Assessment & Assurance Lead targeted threat modelling and risk assessments for blockchain set-ups and ensure required controls are implemented against identified threat vectors. Partner with stakeholders to plan and evidence penetration testing, vulnerability remediation, and risk closure activities. Delivery Governance & Acceptance Criteria Establish measurable security acceptance criteria for HSM-related deliveries (e.g., operational testing such as secure signing/verification, seed management, recovery, error handling, performance/scalability, and secure coding/cryptography validation). Core/Must have skills 7+ years in security architecture / cyber security engineering, with significant depth in cryptography and key management Hands-on experience with HSM technologies and enterprise key management patterns; familiarity with key management tooling such as Vault is desirable. Experience designing/operating key ceremonies, including strong governance, physical/security controls, and auditable processes. Knowledge of security standards and frameworks relevant to cryptography and HSM usage (examples referenced internally include PCI and NIST-aligned approaches; and FIPS requirements are referenced for HSMs). Proven ability to lead threat modelling, security risk assessments, and architecture reviews end-to-end. Strong communication and stakeholder management across engineering, platform, and risk/compliance teams Experience securing blockchain platforms and smart-contract systems Handson smart contract security credentials, audits, or platform certifications covering EVMbased chains (e.g., Ethereum), permissioned DLTs, or Web3 protocols CISSP Certified Information Systems Security Professional ((ISC)) or CISM Certified Information Security Manager (ISACA) (At least one senior, globally recognised cybersecurity certification is strongly preferred for this role, reflecting enterprisescale security ownership and risk accountability.) Certified Blockchain Security Qualified (CBSP) or equivalent recognised blockchain security certification or Certificate in Blockchain Security / Smart Contract Security from a recognised industry or standards body Good to have skills Prior experience in regulated financial services environments Knowledge of ZKP concepts .
Here's how to pick the right one and stand out in your application.
144.883Jobs
31.687IN
81%EN
That number is real. WorkMundi's database shows 144,883 open engineer roles across the world. India has the most with 31,687 jobs, followed by the United States with 30,084. If you just finished reading one job ad and felt paralyzed by choice, you're not alone—but this scale is actually an advantage. It means you can afford to be selective.
Start by geography and language. The majority of engineer ads—117,837 of them—have the job posting text written in English. Use that as one filter, but remember: the ad text language tells you nothing about whether the role actually requires you to speak English day-to-day. Read the job description carefully. Then check which countries have the volume you're targeting. Singapore, Poland, and Australia round out the top five after India and the US.
Next, learn who's hiring. Accenture has posted 2,801 engineer roles. andurilindustries, speechify, and jobgether are also actively recruiting. If you're applying to one of these names, research their hiring patterns and interview style before you apply. That homework pays off.
When you interview, expect the question every engineer hears: 'Tell me about a time you had to debug a problem that wasn't in your job description.' Have a specific story ready—not a general one. Name the tools, the deadline pressure, and what you learned. Hiring managers listen for whether you see problem-solving as part of the role itself, not a favour.