Security engineer in cloud security

Описание:

EPAM provides enterprise software products, open source solutions, and accelerators through EPAM Solutions Hub.

• Architect, implement, and operate security platforms and controls with high availability and measurable outcomes;
• Enhance and integrate security solutions across AWS, Azure, and GCP environments;
• Improve existing controls through automation, IaC/PaC, and self-service capabilities;
• Implement and manage CSPM/CNAPP solutions such as Wiz to monitor and reduce cloud risk;
• Support secure software delivery pipelines, including dependency scanning, artifact validation, and secrets management;
• Develop Infrastructure as Code using Terraform, Pulumi, or Ansible for automated provisioning;
• Apply Policy as Code frameworks such as OPA and Sentinel for enforcement and compliance automation;
• Build and manage observability components for threat detection, alerting, and incident response;
• Collaborate with Security Operations, Dev Ops, and engineering teams to maintain a robust security posture;
• Use AI-assisted tools to accelerate automation, security analysis, and operational documentation.

• Bachelor’s or Master’s degree in Computer Science, Engineering, or a related field, or equivalent experience;
• 5+ Years of experience in security engineering, platform engineering, or related cloud-focused roles;
• Hands-on experience with cloud security across AWS, Azure, and GCP, and with CSPM/CNAPP platforms;
• Strong understanding of networking, secure systems design, and infrastructure security principles;
• Proficiency in Python and/or Power Shell scripting or programming;
• Familiarity with Windows and Linux environments for operational security management;
• Knowledge of CI/CD security, IaC, and PaC practices using Terraform or similar tools;
• Strong operational mindset with skills in monitoring, alerting, and incident response;
• Comfort working with AI-driven development and security analysis tools;
• Excellent communication skills and ability to document and present technical solutions effectively;
• Nice to have:
  Deep expertise in Terraform, Pulumi, Ansible, or OPA frameworks, experience with software supply chain security measures including SBOMs, artifact signing, and dependency risk checks, familiarity with containerization and Kubernetes security controls, knowledge of cloud-native security services and platform tools such as Wiz and Checkov, exposure to IDS, IPS, DLP, EDR, firewalls, and file integrity monitoring, strong Python development background focused on automation and orchestration, experience creating self-service security solutions for engineering enablement, demonstrated use of AI-assisted engineering tools to streamline workflows and security testing.

No conditions specified