Security Architect

EPAM Systems; Colombia; Remote; COP 120,000,000 - 260,000,000; Full time

Job summary

EPAM Systems Inc is seeking a Security Architect to own and advance the company-wide Vulnerability Management program. You will collaborate with VM stakeholders in InfoSec, IT, AWS, Networking, and Patching to refine scanning methods, policies, and tooling, aligning with business goals.

Responsibilities include upgrading security platforms, optimizing cloud integration, and leading next-generation VM initiatives. Strong emphasis on scripting, cross-functional leadership, and documentation.

Qualifications

• 8+ years in security-focused projects.
• 3+ years in Senior/Lead/Manager roles.
• Hands-on experience with vulnerability management platforms (Nexpose/Qualys).
• Scripting: Python, Bash, PowerShell.
• Experience administering Windows and Linux systems.

Responsibilities

• Lead VM program design and rollout with stakeholders.
• Architect VM workflows integrated with corporate systems.
• Calibrate security tooling and cloud-environment scanning.
• Drive automation for recurring security tasks.
• Report KPI progress to InfoSec leadership.

Skills

Security architecture

Vulnerability management

Python

Bash

PowerShell

Scripting

AWS Cloud

DevOps mindset

English proficiency

Tools

Nexpose

Qualys

AWS CloudTrail

CloudWatch

GuardDuty

Job description

We're on the hunt for a Security Architect to join our ranks. In this capacity, you'll support our client, a prominent name in entertainment and technology, as they assume ownership of, enhance, run, and maintain their company-wide Vulnerability Management (VM) initiative. You'll work in close coordination with VM stakeholders within InfoSec, along with online service producers, the IT division, the AWS group, the Networking team, and the Patching function covering Windows, Linux, and Mac systemsYou'll also team up with the Security Engineering group, who will contribute to the technical design of the VM program and carry out implementation under the guidance of the VM manager. This initiative will cover expanding vulnerability scan reach, refining scanning methods, reworking scan policies, calibrating security tooling, and related effortsResponsibilitiesLeverage solid business acumen to frame conversations in business terms, converting technical risk into language leadership can act onSpearhead upgrades to security platforms while enabling their transition into cloud environmentsCalibrate security scanning tools to boost both the breadth of coverage and overall scan efficiencyPush forward automation efforts for recurring security tasks to enhance both speed and consistencyArchitect VM workflows that integrate smoothly with existing corporate systems and processesCross-reference vulnerabilities reported by vendors against Nexpose data, looping in the patching team as neededPlan ahead for scanning infrastructure capacity needs to keep the program scalable over timeAssess discovered vulnerabilities and rank them by urgency, factoring in business impact and system importanceInterpret findings surfaced through SAST and triage them appropriately according to associated riskSync up with service owners and other stakeholders on any proposed modifications or updatesTrack team output and monitor program progress against established KPI benchmarksManage streamlined, clear communication of reporting up to InfoSec leadershipRefresh current runbooks and author new documentation to keep operations well-supportedCollect both functional and non-functional requirements for VM tooling, run proof-of-concept testing, and put forward recommendationsShape a forward-looking VM program that reflects the client's specific business context alongside industry-standard security practicesLead the rollout of the next-generation VM program, carrying it from initial vision through to complete executionReport on a direct basis to the InfoSec head or CISORequirementsAt least 8 years of applicable background working on security-focused projectsA minimum of 3 years spent in Senior, Lead, Manager, or Owner-level capacitiesDemonstrated history managing engagements involving teams of 20 or more full-time staffBackground using at least one vulnerability management platform, such as Nexpose or QualysHands-on background in offensive security disciplinesExperience contributing to application and infrastructure security initiativesBackground participating in or managing bug bounty programsExperience producing documentation intended for client audiencesCapability in scripting, including reading existing code and defining technical specificationsStrong command of Python, Bash, and PowerShellPrevious background administering both Windows and Linux systemsSolid grasp of networking fundamentals, including VLAN trunking and TCP/IP conceptsProfessional proficiency in English (C1) and a proactive, accountable approach to problem-solvingNice to haveBackground functioning as a DevOps or Security Engineer within AWS cloud infrastructureWorking knowledge of AWS tools including CloudTrail, CloudWatch, Config, Lambda, GuardDuty, Inspector, SSM, EKS, and FargateBackground managing and integrating Cloud Security Posture Management (CSPM) platformsExperience working with Static Application Security Testing (SAST) toolingRelevant certification, which would be considered a valuable addition to your qualificationsWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedInEPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.