🎁 Before you apply, rehearse this interview. Create your free WorkMundi account and get an Interview Training on HelpsYouSpeak — no cost, no card. I want my training →
Position: Security Platform Engineer Tool Configuration Data Unification Job Type :- Remote IST Experience :- 6 - 8 years Position Overview We are seeking a Security Platform Engineer specializing in Tool Configuration and Data Unification to bring deep security domain expertise to the hands-on configuration of our scanning and aggregation stack. This role is responsible for unifying the output of multiple security scanners into a single, coherent vulnerability language. You will tune what each tool detects, define how findings are normalized and deduplicated, and design the data model that transforms raw scanner output into defensible, evaluated vulnerability records. Working alongside DevSecOps engineers and GRC engineers, you will own the intelligence and structure of the security data pipeline determining what flows through it and how it is shaped to support FedRAMP compliance, audit evidence requirements, and actionable vulnerability management at scale. Key Responsibilities Own scanner configuration and tuning across the detection fleet: Scan policies Coverage scope Severity mappings Signal quality for Trivy Semgrep Qualys Tenable AWS Inspector CrowdStrike Dependabot Design the deduplication and correlation strategy in DefectDojo, including: Keying logic that recognizes the same vulnerability across: Image scans Runtime scans Host scans Dependency scans Grouping rules that collapse duplicate findings into single actionable issues Target: ~70% ticket reduction Define the unified findings data model, including: Field schema Asset identity Component mapping Support the FedRAMP reporting requirements: 11-field vulnerability detail schema 8-field accepted-vulnerability reporting schema Build the reachability signal layer using: AWS Reachability Analyzer Service mesh eBPF-based signals Feed internet-reachability determinations (IRV/NIRV) per finding. Configure runtime visibility using CrowdStrike Falcon Cloud Security. Reconcile runtime observations against image scan results to eliminate the rebuilt-but-not-redeployed gap. Partner with GRC engineers to ensure the data model captures all information required by the: LEV IRV PAIN evaluation engine Audit evidence requirements Validate detection coverage across: Containers Hosts Serverless environments Dependencies External attack surface Identify security blind spots. Required Skills 6+ years of Security Engineering experience with hands-on vulnerability management. Strong understanding of CVEs CPE/PURL identity Scanner false positives Scanner disagreement analysis Experience configuring and tuning multiple commercial and open-source security scanners in production. Strong data modeling skills for: Normalization Deduplication Enrichment Asset correlation AWS cloud security expertise, including: Container security Image scanning Registry policy Runtime security EKS ECS Working knowledge of: CISA KEV EPSS VEX Vulnerability prioritization Hands-on experience with: Trivy Semgrep Qualys Tenable AWS Inspector CrowdStrike Dependabot Experience with DefectDojo for vulnerability aggregation and deduplication. Preferred (Bonus) Skills Deep DefectDojo experience, including: Deduplication engine Parsers API Experience with network reachability analysis: AWS Reachability Analyzer Service mesh telemetry eBPF tooling Familiarity with FedRAMP concepts: VDR/VER LEV (Likely Exploitable) IRV/NIRV (Internet-Reachable / Non-Internet-Reachable) PAIN ratings Timeframe classes Experience writing custom scanner parsers or findings transformation code in Python. Disclaimer: This job posting has been aggregated from external source .
Here's how to pick the right one and stand out in your application.
144.883Jobs
31.687IN
81%EN
That number is real. WorkMundi's database shows 144,883 open engineer roles across the world. India has the most with 31,687 jobs, followed by the United States with 30,084. If you just finished reading one job ad and felt paralyzed by choice, you're not alone—but this scale is actually an advantage. It means you can afford to be selective.
Start by geography and language. The majority of engineer ads—117,837 of them—have the job posting text written in English. Use that as one filter, but remember: the ad text language tells you nothing about whether the role actually requires you to speak English day-to-day. Read the job description carefully. Then check which countries have the volume you're targeting. Singapore, Poland, and Australia round out the top five after India and the US.
Next, learn who's hiring. Accenture has posted 2,801 engineer roles. andurilindustries, speechify, and jobgether are also actively recruiting. If you're applying to one of these names, research their hiring patterns and interview style before you apply. That homework pays off.
When you interview, expect the question every engineer hears: 'Tell me about a time you had to debug a problem that wasn't in your job description.' Have a specific story ready—not a general one. Name the tools, the deadline pressure, and what you learned. Hiring managers listen for whether you see problem-solving as part of the role itself, not a favour.