Senior Security Architect

EPAM Systems; Chile; Remote; CLP 58,881,000 - 117,763,000; Full time

Job summary

EPAM Systems Inc. seeks a Senior Security Architect to own and enhance the organization-wide Vulnerability Management program across security and IT teams.

You will lead modernization efforts, refine scanning policies, and expand coverage while coordinating with AWS, patching, and service owners to accelerate remediation. You will also drive automation, develop scalable VM workflows, and produce strategic guidance and KPI-driven reporting for InfoSec leadership.

Qualifications

• Minimum 10 years of security-focused experience
• 5+ years in senior/lead/manager roles
• Experience overseeing teams of 40+ FTE
• Proficient with vulnerability management tools (Nexpose/Qualys)
• Strong scripting ability (Python/Bash/PowerShell)
• Windows and Linux administration
• Solid networking knowledge (VLANs, TCP/IP)
• Professional English at advanced level (C1)

Responsibilities

• Own and mature the organization-wide Vulnerability Management program
• Modernize security platforms and move toward cloud-based environments
• Adjust and refine scanning solutions to improve coverage and speed
• Drive automation to increase consistency and throughput
• Develop VM workflows aligned with existing tooling and processes
• Guide implementation of next-generation VM strategy from concept to deployment
• Provide clear reporting to InfoSec leadership and stakeholders
• Draft and revise runbooks and technical documentation

Job description

We're looking to welcome a Senior Security Architect into our team. In this role, you'll help our client, a well-known leader in entertainment and technology, take ownership of, refine, operate, and sustain their organization-wide Vulnerability Management (VM) program. You'll partner closely with VM stakeholders across InfoSec, as well as online service producers, the IT department, the AWS team, the Networking group, and the Patching function spanning Windows, Linux, and Mac environmentsAdditionally, you'll collaborate with the Security Engineering team, who will support the technical design of the VM program and handle implementation under direction from the VM manager. This effort will involve broadening vulnerability scan coverage, enhancing scanning techniques, restructuring scan policies, adjusting security tools, and moreResponsibilitiesDraw on strong business judgment to discuss matters in commercial terms, reframing technical risk into insights leadership can readily useLead efforts to modernize security platforms and facilitate their move toward cloud-based environmentsAdjust and refine security scanning solutions to enhance coverage depth and improve scanning speedAdvance automation initiatives covering repetitive security work to increase both consistency and turnaround timeBuild out VM workflows designed to mesh seamlessly with the organization's current tools and proceduresCompare vendor-flagged vulnerabilities against data from Nexpose, bringing in the patching team wherever necessaryForecast capacity requirements for scanning infrastructure to maintain long-term program scalabilityEvaluate identified vulnerabilities and determine priority levels based on their business consequences and system relevanceReview SAST-generated findings and sort them by risk level for appropriate handlingCollaborate with service owners and other involved parties regarding any suggested changes or adjustmentsMonitor team performance and gauge program progress relative to defined KPI targetsOversee clear and organized reporting channels directed toward InfoSec leadershipRevise existing runbooks and draft new documentation to maintain strong operational supportGather functional and non-functional specifications for VM tools, carry out proof-of-concept evaluations, and present findings with recommendationsDevelop a next-generation VM strategy that accounts for the client's unique business landscape while aligning with recognized security standardsGuide the implementation of the next-generation VM program, steering it from concept all the way to full deploymentProvide direct reporting to the InfoSec head or CISORequirementsA minimum of 10 years of relevant experience across security-centered initiativesAt least 5 years spent operating in Senior, Lead, Manager, or Owner-level positionsProven history overseeing engagements for teams comprising 40 or more full-time personnelExperience utilizing one or more vulnerability management solutions, including Nexpose or QualysPractical exposure to offensive security methodologiesBackground supporting security programs across both applications and infrastructureExperience engaging with bug bounty initiatives, whether participating in or overseeing themBackground crafting documentation aimed at client-facing audiencesSkilled in scripting work, encompassing the ability to interpret code and outline technical requirementsAdvanced proficiency across Python, Bash, and PowerShellBackground handling system administration duties for both Windows and Linux platformsFirm understanding of core networking concepts, including VLAN trunking and TCP/IPProfessional proficiency in English (C1) and a proactive, accountable approach to problem-solvingNice to haveBackground serving as a DevOps or Security Engineer within AWS-based cloud settingsFamiliarity with AWS offerings such as CloudTrail, CloudWatch, Config, Lambda, GuardDuty, Inspector, SSM, EKS, and FargateExperience handling and incorporating Cloud Security Posture Management (CSPM) toolsBackground utilizing Static Application Security Testing (SAST) solutionsRelevant certification, which would be considered a valuable addition to your qualificationsWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedInEPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.