🎁 Before you apply, rehearse this interview. Create your free WorkMundi account and get an Interview Training on HelpsYouSpeak — no cost, no card. I want my training →
We are looking for a hands-on Security Engineer to lead vulnerability management and PKI operations within the Information Security Operations team. This role will engineer the vulnerability management lifecycle across our data center, endpoint, and cloud VM environments, driving remediation through strategic partnerships with infrastructure teams. In addition, the role will oversee Enterprise Machine Identity, managing the lifecycle of public-facing and internal SSL/TLS certificates while championing automation to eliminate manual toiland prevent certificate-related outages. The ideal candidate brings deep expertise in Risk-Based Vulnerability Management (RBVM) using platforms like Crowdstrike, understands complex patching cycles across hybrid infrastructure, and is well-versed in automated certificate lifecycle management using tools like Sectigo or DigiCert. A strong technical foundation in modern internal CA/PKI architecture and cryptography principles is required Engineer and mature the Crowdstrike Vulnerability Management platform, optimizing scan coverage, asset tagging, credential management, and API integrations. Champion Risk-Based Vulnerability Management (RBVM) by contextualizing vulnerabilities with threat intelligence (e.g., remediation of high-risk assets. Partner closely with infrastructure and cloud teams to drive remediation within established SLAs, transforming monthly patch meetings into data-driven risk discussions. Design and maintain automated reporting dashboards and KPIs/KRIs to track scan health, remediation velocity, and overall risk reduction. Formulate and drive the remediation strategy for End-of-Life (EOL) systems, acting as a primary advisor on legacy system risk mitigation. PKI, Cryptography & Machine Identity Management transition from manual ServiceNow requests to zero-touch provisioning. Act as the Subject Matter Expert (SME) for internal Certificate Authority (CA) 5+ years of experience in IT security or infrastructure, with a specialized focus on vulnerability risk management and PKI operations. Hands-on administrative experience with Crowdstrike Falcon Spotlight, Qualys, or similar enterprise-grade exposure management platforms. Deep experience managing SSL/TLS certificates via platforms like Sectigo, DigiCert, or Venafi, with a strong track record of automating certificate deployments. ServiceNow/Jira for automated ticketing). Strong technical grasp of internal PKI/CA principles, modern cryptography, and machine identity best practices. Excellent technical documentation and communication skills, capable of translating technical vulnerabilities into business risk. Experience integrating Vulnerability Management or PKI workflows with Python, PowerShell, Ansible, or SOAR platforms). Experience with External Attack Surface Management (EASM) or Cloud Security Advanced understanding of EOL system risk mitigation (network segmentation, virtual Security certifications such as CISSP, CISM, GIAC (e.g., Bachelor's degree in Cybersecurity, Information Technology, or a related field We are proud to offer a competitive salary alongside a strong insurance package. We pride ourselves on the growth of our employees, offering extensive learning and development resources We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. If you would like more information about how your data is processed, please contact us. .
Here's how to pick the right one and stand out in your application.
144.883Jobs
31.687IN
81%EN
That number is real. WorkMundi's database shows 144,883 open engineer roles across the world. India has the most with 31,687 jobs, followed by the United States with 30,084. If you just finished reading one job ad and felt paralyzed by choice, you're not alone—but this scale is actually an advantage. It means you can afford to be selective.
Start by geography and language. The majority of engineer ads—117,837 of them—have the job posting text written in English. Use that as one filter, but remember: the ad text language tells you nothing about whether the role actually requires you to speak English day-to-day. Read the job description carefully. Then check which countries have the volume you're targeting. Singapore, Poland, and Australia round out the top five after India and the US.
Next, learn who's hiring. Accenture has posted 2,801 engineer roles. andurilindustries, speechify, and jobgether are also actively recruiting. If you're applying to one of these names, research their hiring patterns and interview style before you apply. That homework pays off.
When you interview, expect the question every engineer hears: 'Tell me about a time you had to debug a problem that wasn't in your job description.' Have a specific story ready—not a general one. Name the tools, the deadline pressure, and what you learned. Hiring managers listen for whether you see problem-solving as part of the role itself, not a favour.
