Security Operations Engineer - Threat Hunting & IR

EPAM Systems Inc; Colombia; Remote; COP 90,000,000 - 130,000,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

Upskilling & certification courses

LinkedIn Learning access

Global career opportunities

Job summary

EPAM Systems Inc. seeks a Support Engineer to strengthen our security operations. You will monitor local and AWS environments, perform proactive threat hunting, and design incident response playbooks.

The role requires hands-on CrowdStrike Falcon, Splunk ES expertise, and strong IAM oversight, with clear reporting to stakeholders. The ideal candidate has 3+ years in network security, is proficient in email security, and knowledgeable about cloud security with AWS.

Qualifications

• At least 3 years of hands-on experience specializing in network security.
• Practical day-to-day work with the CrowdStrike Falcon platform for endpoint protection and threat remediation.
• Familiarity with electronic mail security strategies and solutions designed to intercept and stop phishing or message-based attacks.
• Extensive background in executing thorough security investigations to pinpoint and evaluate potential breaches.
• Demonstrated expertise in continuous security surveillance to spot and react to suspicious activity instantly.
• Direct operational involvement across diverse security operations disciplines.
• Working knowledge of Splunk Enterprise Security configured specifically for tracking, detection, and reporting tasks.
• English proficiency at the upper-intermediate level (B2) or higher.

Responsibilities

• Track local and AWS environments for hostile actions, intrusions, and anomalous, illicit, or unauthorized behavior.
• Observe identity and access management operations, including identifying any misuse of privileges by authorized personnel.
• Design SIEM and SOAR detection and mitigation procedures, deploying them as operational rules, while building, evaluating, and refining playbooks for incident response.
• Conduct proactive threat hunting exercises and contribute to wider threat intelligence workflows.
• Execute additional security administration tasks alongside primary monitoring duties.
• Produce clear and comprehensive status summaries for technical specialists, management, and stakeholders.

Skills

Threat hunting

Incident response

Security monitoring

IAM monitoring

Phishing defense

Splunk ES

CrowdStrike Falcon

AWS Security

Email security

Tools

CrowdStrike Falcon

Splunk ES

Palo Alto Cortex XSOAR

AWS Security services

Job description

EPAM Systems Inc. seeks a Support Engineer to strengthen our security operations. You will monitor local and AWS environments, perform proactive threat hunting, and design incident response playbooks.

The role requires hands-on CrowdStrike Falcon, Splunk ES expertise, and strong IAM oversight, with clear reporting to stakeholders. The ideal candidate has 3+ years in network security, is proficient in email security, and knowledgeable about cloud security with AWS.