PKI Security Engineer, Product Security

Описание вакансии

With 1,000+ intelligence professionals serving over 1,900 clients worldwide, Recorded Future is the world’s most advanced, and largest, intelligence company!

We are seeking a highly motivated and technically proficient PKI Engineer to become a core member of the Product Security team, a vital component of the broader Security organization at Recorded Future. This critical role is based in our Gothenburg office and will be absolutely instrumental in securing our global cloud infrastructure. The successful candidate will take ownership of the design, development, deployment, and ongoing management of our internal Public Key Infrastructure (PKI), ensuring it meets the highest standards of security, availability, and scalability for all our cloud-native environments. This is a foundational role that directly impacts the security posture of our product and the integrity of our data.

What You’ll Do:

This is a key, hands-on engineering role with a strong emphasis on automation and operational excellence. Your primary responsibilities will include:

• Designing and Implementing Automated Certificate Lifecycle Management (CLM): You will be responsible for developing and maintaining robust, highly automated solutions for the entire certificate lifecycle—from issuance and renewal to revocation and deployment. This includes leveraging tools and scripting to integrate CLM seamlessly with our existing cloud orchestration and configuration management systems.
• PKI Architecture and Governance: You will actively contribute to the architectural evolution of our internal Certificate Authorities (CAs) and related trust stores. You will ensure the PKI design and its operational practices strictly adhere to both Recorded Future's rigorous internal security policies and industry best practices and regulatory requirements (e.g., NIST, ISO 27001).
• Subject Matter Expertise and Consultation: You will serve as the primary Subject Matter Expert (SME) for all things PKI and cryptography across the organization. This involves providing high-level consultation and technical guidance to engineering, platform, and development teams on secure key management, certificate usage, transport layer security (TLS/SSL), and digital signing.
• Operational Support and Troubleshooting: You will troubleshoot and resolve complex, high-impact certificate-related issues across our production and development environments, often requiring deep-dive analysis into network traffic, application logs, and CA infrastructure.
• Security Tooling and Integration: Research, evaluate, and integrate modern security tooling related to PKI, hardware security modules (HSMs), and secrets management to enhance the security and efficiency of our operations.
• Platform Security Team Participation: In addition to core PKI duties, this role involves active participation in the Platform Security team's daily operations, including participating in on-call rotations, security incident response activities, and broader platform-related security projects. This collaboration ensures a cohesive and secure platform foundation.

What You’ll Bring:

• 3+ years of proven relevant professional experience
• Strong foundational knowledge of computer security principles
• In-depth knowledge in PKI concepts, protocols (e.g., OCSP, CRL, SCEP, EST), and certificate management
• Demonstrated experience with cloud-based PKI services, such as AWS Certificate Manager (ACM)
• Experience working with HashiCorp Vault is a plus
• A proactive and enthusiastic approach to learning new technologies
• Strong communication skills
• A background in coding/scripting is a plus

Why should you join Recorded Future?Recorded Future employees (or “Futurists”), represent over 40 nationalities and embody our core values of having high standards, practicing inclusion, and acting ethically. Our dedication to empowering clients with intelligence to disrupt adversaries has earned us a 4.6-star user rating on G2 and more than 50% of Fortune 100 companies as customers.

Want more info? 

Blog & Podcast: Learn everything you want to know (and maybe some things you’d rather not know) about the world of cyber threat intelligence

Linkedin, Instagram & Twitter: What’s happening at Recorded Future

The Record: The Record is a cybersecurity news publication that explores the untold stories in this rapidly changing field

Timeline: History of Recorded Future

Recognition: Check out our awards and announcements


We are committed to maintaining an environment that attracts and retains talent from a diverse range of experiences, backgrounds and lifestyles.  By ensuring all feel included and respected for being unique and bringing their whole selves to work, Recorded Future is made a better place every day.

If you need any accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to our recruiting team at careers@recordedfuture.com 

*Recorded Future is an equal opportunity and affirmative action employer and we encourage candidates from all backgrounds to apply. Recorded Future does not discriminate based on race, religion, color, national origin, gender including pregnancy, sexual orientation, gender identity, age, marital status, veteran status, disability or any other characteristic protected by law.

Recorded Future will not discharge, discipline or in any other manner discriminate against any employee or applicant for employment because such employee or applicant has inquired about, discussed, or disclosed the compensation of the employee or applicant or another employee or applicant.*

Recorded Future does not administer a lie detector test as a condition of employment or continued employment. This is in compliance with the law of the Commonwealth of Massachusetts, and in alignment with our hiring practices across all jurisdictions.

Recorded Future maintains a drug-free workplace.

*Notice to Agency and Search Firm Representatives:Recorded Future will not accept unsolicited resumes from any source other than directly from a candidate. Any unsolicited resumes sent to Recorded Future, including those sent to our employees or through our website, will become the property of Recorded Future. Recorded Future will not be liable for any fees related to unsolicited resumes.*

*Agencies must have a valid written agreement in place with Recorded Future's recruitment team and must receive written authorization before submitting resumes. Submissions made without such agreements and authorization will not be accepted and no fees will be paid.

Note: Our interview process for all final-round candidates requires a mandatory in-person interview or a live, scheduled video conference with the hiring manager. We do not conduct interviews via instant messaging or text. Al*l communications during the application process will come from individuals within our HR department via their Recorded Future email address.