🎁 Before you apply, rehearse this interview. Create your free WorkMundi account and get an Interview Training on HelpsYouSpeak — no cost, no card. I want my training →
Who We Are Within Technology Risk, Advisory is the consultative and technology subject matter expertise arm, responsible for assessing new technology initiatives for risk, partnering with engineers to architect and design secure products and services, embedding implementation reviews as part of the SDLC and CI/CD pipeline via code analysis and penetration testing, and guiding technology innovation in terms of security and control across Goldman Sachs. The team plays a critical role in designing and assessing controls for our transition to building native public cloud applications. Goldman Sachs has one of the most progressive Technology Risk teams in the industry and is continuing to push the development of risk in preference to security within technology and the business. Year-on-year success has led the team to work deeper into the organization and gain valuable insights into how technology needs to function, what its risk really is, and how this impacts the business. Responsibilities Conduct comprehensive cloud security assessments, evaluating designs, configurations, and implementations across various cloud service providers (CSPs).Identify and analyze potential security risks, vulnerabilities, and misconfigurations within cloud environments and applications.Perform software architecture design reviews for cloud deployments.Develop secure architecture design patterns, particularly for cloud-native applications.Develop, evaluate, and document security measures, controls, and guardrails to protect data, applications, APIs, and infrastructure in the cloud.Collaborate with engineering and development teams to embed security best practices throughout the software development lifecycle (SDLC) and CI/CD pipelines for cloud-native applications.Provide technical advisory services on cloud security to internal stakeholders, ensuring alignment with firm-wide security policies and industry best practices.Develop and maintain scripts and automated solutions to streamline security processes, vulnerability identification, and compliance checks within cloud environments.Stay updated on emerging cloud security threats, technologies, and regulatory requirements.Contribute to incident response and remediation efforts related to cloud security events as required. Qualifications Basic Qualifications: Development / Scripting / Coding Skills: Demonstrated proficiency and hands-on experience in scripting and coding, particularly with languages such as Python, PowerShell, or Bash, for automation, data analysis, or security tooling.Baseline Security Knowledge: Fundamental understanding of cybersecurity principles, security controls, and common security domains (e.g., network security, identity and access management, data protection, vulnerability management).Cloud Fundamentals: A foundational grasp of cloud computing concepts and architectures, with basic familiarity and understanding of at least one major Cloud Service Provider (AWS). Prior project experience in cloud and conceptual understanding is essential.Bachelor's degree in Computer Science, Information Security, or a related technical field, or equivalent practical experience.Strong analytical and problem-solving skills with an investigative mindset.Excellent written and verbal communication skills, with the ability to articulate technical concepts to both technical and non-technical audiences.Preferred Qualifications: 7+ years in cybersecurity with strong cloud security architecture experience and ability to review and define enterprise-level security designs.Proven track record driving firm-wide cloud security initiatives across shared cloud platforms, including baselines, guardrails, and secure design patterns.Deep knowledge of cloud security domains: IAM, network security, encryption/key management, workload/container security, and monitoring/logging.Strong leadership and communication skills to influence senior stakeholders, align security with business goals, and mentor technical teams.Translate high-level design use cases into production-ready cloud architectures, optimizing for performance, resilience, and cost-efficiency while maintaining a rigorous security posture.Prior experience in a security-focused role within financial services or other highly regulated industries.Familiarity with industry security frameworks and standards (e.g., NIST, ISO 27001, CIS Benchmarks, OWASP).Relevant security or cloud certifications (e.g., Security+,CySA+, AWS Certified Security Specialty, Azure Security Engineer Associate, Google Cloud Professional Cloud Security Engineer).{'minSalary': None, 'maxSalary': None, 'currency': None, '__typename': 'RoleCompensationGraphQlDTO'} .
Here's how to pick the right one and stand out in your application.
144.883Jobs
31.687IN
81%EN
That number is real. WorkMundi's database shows 144,883 open engineer roles across the world. India has the most with 31,687 jobs, followed by the United States with 30,084. If you just finished reading one job ad and felt paralyzed by choice, you're not alone—but this scale is actually an advantage. It means you can afford to be selective.
Start by geography and language. The majority of engineer ads—117,837 of them—have the job posting text written in English. Use that as one filter, but remember: the ad text language tells you nothing about whether the role actually requires you to speak English day-to-day. Read the job description carefully. Then check which countries have the volume you're targeting. Singapore, Poland, and Australia round out the top five after India and the US.
Next, learn who's hiring. Accenture has posted 2,801 engineer roles. andurilindustries, speechify, and jobgether are also actively recruiting. If you're applying to one of these names, research their hiring patterns and interview style before you apply. That homework pays off.
When you interview, expect the question every engineer hears: 'Tell me about a time you had to debug a problem that wasn't in your job description.' Have a specific story ready—not a general one. Name the tools, the deadline pressure, and what you learned. Hiring managers listen for whether you see problem-solving as part of the role itself, not a favour.