Lead Azure AI Security Engineer

EPAM Systems; Montenegro; Hybrid; BRL 355,000 - 503,000; Full time

Benefits offered by this job

Corporate events

Career development

Medical package

Learning platform access

Job summary

EPAM Systems in Montenegro is seeking an Azure AI Security Engineer to provide technical leadership securing Azure and Microsoft cloud environments at enterprise scale. You will design security architecture across hybrid and multi-cloud, implement controls for workloads and data, and collaborate with engineering, DevOps and compliance teams to embed security into the full delivery lifecycle.

The role also involves advancing Zero Trust and AI-assisted automation while supporting a hybrid work

Qualifications

• Bachelor's degree or equivalent practical experience in CS/Info Security/Engineering

Responsibilities

• Provide technical leadership in securing Azure and Microsoft cloud environments at enterprise scale
• Design, implement and improve security architecture across Azure, Microsoft 365, Entra ID and hybrid/multi-cloud
• Plan and implement security controls for cloud workloads, apps, infra and data
• Collaborate with engineering, DevOps, and compliance teams to embed security into delivery
• Support Zero Trust architecture, secure authentication and least privilege
• Develop automation scripts and tooling using PowerShell, Python, Azure CLI, Logic Apps and REST APIs
• Utilize AI-powered tools to automate security triage, log analysis, and runbook automation
• Design or integrate AI agents and AI-assisted automations with governance and data protection in mind
• Train and support teammates on cloud security practices and AI-assisted automation

Skills

Azure security

Cloud security concepts

DevSecOps practices

Security leadership

Education

Bachelor's degree in Computer Science/Info Security/Engineering

Tools

Azure CLI

PowerShell

KQL

Logic Apps

Azure Functions

REST APIs

Terraform/Bicep

Job description

We are seeking an experienced Azure AI Security Engineer to provide technical leadership in securing Azure and Microsoft cloud environments at enterprise scale. In this role, you will design and implement security architecture across cloud and hybrid environments while leveraging AI-powered tools and agentic workflows to automate and improve daily security engineering activities.

This position offers hybrid setup with the flexibility to work from any location in Montenegro, whether it's your home or our dynamic offices in Herceg-Novi and Podgorica.

Responsibilities

• Provide technical leadership and subject matter expertise in securing Azure and Microsoft cloud environments at enterprise scale
• Design, implement and improve security architecture across Azure, Microsoft 365, Microsoft Entra ID, hybrid and multi-cloud environments, with Azure as the primary cloud platform
• Work across key cloud security domains including Cloud Security Posture Management / CNAPP / CSPM, Identity and Access Management, Privileged Access Management, Data Protection and Data Loss Prevention, Microsoft Defender security stack, SIEM/SOAR and automated incident response, Business Continuity and Disaster Recovery, DevSecOps and Infrastructure as Code security, Container, Kubernetes, API and microservice security, Compliance, governance, policy-as-code and secure cloud landing zones
• Plan, design and implement security controls for cloud workloads, applications, infrastructure and data
• Collaborate with engineering, infrastructure, development, DevOps, database, operations and compliance teams to embed security into the full delivery lifecycle
• Support implementation and continuous improvement of Zero Trust architecture, secure authentication, conditional access, least privilege and identity protection
• Develop and maintain automation scripts, workflows and security tooling using PowerShell, Python, Azure CLI, Logic Apps, Azure Functions, KQL, REST APIs and related technologies
• Employ AI-powered tools and agentic workflows to automate and improve daily security engineering activities such as security findings triage, log analysis, incident investigation support, configuration review, compliance evidence collection, security documentation generation, vulnerability analysis and runbook automation
• Design or integrate AI agents and AI-assisted automations using modern AI platforms and frameworks where appropriate, while ensuring proper security, privacy and governance controls
• Contribute to secure adoption of AI technologies by defining guardrails for data protection, access control, prompt security, model usage, auditability and human-in-the-loop processes
• Train and support other team members on cloud security practices, security processes and AI-assisted automation approaches

Requirements

• Bachelor's degree in Computer Science, Information Security, Engineering or equivalent practical experience
• Hands-on experience with Microsoft Azure services and strong understanding of cloud security concepts, Azure architecture and enterprise-scale cloud environments
• Practical experience with Microsoft security technologies such as Microsoft Entra ID / Azure Active Directory, Microsoft Defender for Cloud and Microsoft Defender XDR
• Familiarity with Microsoft Sentinel, Microsoft Purview and Microsoft Intune
• Skills in Conditional Access, Identity Protection and Privileged Identity Management
• Proficiency in Key Vault, Azure Policy and Azure Monitor / Log Analytics
• Strong engineering background including experience with Microsoft infrastructure and cloud solutions such as Active Directory, Microsoft 365, Exchange Online and hybrid identity
• Security engineering experience in at least one business or technology domain, with participation in at least several production projects
• Understanding of software development lifecycle, DevOps/DevSecOps practices, cloud security assessment methodologies and secure-by-design principles
• Capability to work closely with developers, business analysts, QA engineers, architects, project managers, infrastructure and operations teams
• Competency to follow, maintain and improve defined security processes
• Practical understanding of AI-assisted productivity and automation beyond basic chatbot usage, including building or configuring AI agents, integrating LLMs with tools and APIs, prompt engineering, creating AI-assisted runbooks and using AI tools securely with awareness of sensitive data handling
• Good communication skills and ability to explain security risks, technical decisions and remediation plans to both technical and non-technical stakeholders

Nice to have

• Skills in scripting, automation or software development using PowerShell, Python or Bash, alongside SIEM/SOAR platforms such as Microsoft Sentinel, KQL and Logic Apps
• Familiarity with CNAPP/CSPM/CWPP/CIEM tools such as Prisma Cloud, Wiz or Orca, and Infrastructure as Code and policy-as-code tools such as Terraform, Bicep and Azure Policy
• Understanding of compliance or security frameworks such as ISO 27001, NIST or CIS Benchmarks, and container and Kubernetes security including AKS, image scanning and network policies
• Familiarity with AI/LLM platforms or frameworks such as Azure OpenAI, Microsoft Copilot Studio and Semantic Kernel, along with understanding of AI security risks such as data leakage, prompt injection and model governance
• AZ-500, SC-100, SC-200, SC-300, SC-400, AZ-104, AZ-305, CISSP, CISM, CISA, CCSP, AI-900, AI-102, PL-900

We offer

• We connect like-minded people
  • Experience exchange with colleagues from 55+ locations
  • Corporate and social events
  • Enjoyable working environment
  • Personal career development, soft skills and well-being programs
  • Unlimited access to Internal Learning Platform
  • Free English classes with certified teachers
  • Participation in the Employee Stock Purchase Plan
  • Comprehensive medical package (can be extended to family members)
  • Four trust days per year for personal needs
  • Benefits package (hotels, restaurants, stores and services)

EPAM is a leading global provider of digital platform engineering and development services. For over 30 years, our team has helped leading brands navigate the waves of digital transformation, building solutions that help them stay competitive through constant market disruption.

Thank you for your interest in this position. Please note that only candidates whose experience closely matches the job requirements will be contacted. If you do not receive an email from us, please do not be discouraged - feel free to apply for other positions that better align with your experience. If you have any questions, you can reach us at [e-mail].