Security Architect

EPAM Systems; Chile; Remote; CLP 60,000,000 - 110,000,000; Full time

Job summary

EPAM Systems Inc. seeks a Senior Security Architect to lead the company-wide Vulnerability Management initiative. You will partner with InfoSec stakeholders, VM engineers, and cloud teams to own, enhance, run, and maintain the VM program across Windows, Linux, and Mac environments.

You will drive scanning policy design, tooling calibration, automation, and cross-functional collaboration to deliver scalable, secure outcomes aligned with business priorities and industry best practices.

Qualifications

• 8+ years of security-focused project experience.
• 3+ years in senior/lead/manager roles.
• Experience leading large teams (20+ FTE).
• Hands-on with at least one VM platform (Nexpose or Qualys).
• Scripting in Python, Bash, or PowerShell.
• AWS cloud experience and DevOps mindset.
• Strong English (C1) communication.

Responsibilities

• Lead the VM program and design its technical architecture.
• Collaborate with InfoSec, AWS, Networking, and patching teams.
• Calibrate scanning tooling and policies; drive automation.
• Develop and refresh runbooks and documentation.
• Report progress to InfoSec leadership and KPI tracking.

Job description

We're on the hunt for a Security Architect to join our ranks. In this capacity, you'll support our client, a prominent name in entertainment and technology, as they assume ownership of, enhance, run, and maintain their company-wide Vulnerability Management (VM) initiative. You'll work in close coordination with VM stakeholders within InfoSec, along with online service producers, the IT division, the AWS group, the Networking team, and the Patching function covering Windows, Linux, and Mac systemsYou'll also team up with the Security Engineering group, who will contribute to the technical design of the VM program and carry out implementation under the guidance of the VM manager. This initiative will cover expanding vulnerability scan reach, refining scanning methods, reworking scan policies, calibrating security tooling, and related effortsResponsibilitiesLeverage solid business acumen to frame conversations in business terms, converting technical risk into language leadership can act onSpearhead upgrades to security platforms while enabling their transition into cloud environmentsCalibrate security scanning tools to boost both the breadth of coverage and overall scan efficiencyPush forward automation efforts for recurring security tasks to enhance both speed and consistencyArchitect VM workflows that integrate smoothly with existing corporate systems and processesCross-reference vulnerabilities reported by vendors against Nexpose data, looping in the patching team as neededPlan ahead for scanning infrastructure capacity needs to keep the program scalable over timeAssess discovered vulnerabilities and rank them by urgency, factoring in business impact and system importanceInterpret findings surfaced through SAST and triage them appropriately according to associated riskSync up with service owners and other stakeholders on any proposed modifications or updatesTrack team output and monitor program progress against established KPI benchmarksManage streamlined, clear communication of reporting up to InfoSec leadershipRefresh current runbooks and author new documentation to keep operations well-supportedCollect both functional and non-functional requirements for VM tooling, run proof-of-concept testing, and put forward recommendationsShape a forward-looking VM program that reflects the client's specific business context alongside industry-standard security practicesLead the rollout of the next-generation VM program, carrying it from initial vision through to complete executionReport on a direct basis to the InfoSec head or CISORequirementsAt least 8 years of applicable background working on security-focused projectsA minimum of 3 years spent in Senior, Lead, Manager, or Owner-level capacitiesDemonstrated history managing engagements involving teams of 20 or more full-time staffBackground using at least one vulnerability management platform, such as Nexpose or QualysHands-on background in offensive security disciplinesExperience contributing to application and infrastructure security initiativesBackground participating in or managing bug bounty programsExperience producing documentation intended for client audiencesCapability in scripting, including reading existing code and defining technical specificationsStrong command of Python, Bash, and PowerShellPrevious background administering both Windows and Linux systemsSolid grasp of networking fundamentals, including VLAN trunking and TCP/IP conceptsProfessional proficiency in English (C1) and a proactive, accountable approach to problem-solvingNice to haveBackground functioning as a DevOps or Security Engineer within AWS cloud infrastructureWorking knowledge of AWS tools including CloudTrail, CloudWatch, Config, Lambda, GuardDuty, Inspector, SSM, EKS, and FargateBackground managing and integrating Cloud Security Posture Management (CSPM) platformsExperience working with Static Application Security Testing (SAST) toolingRelevant certification, which would be considered a valuable addition to your qualificationsWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedInEPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.