Support Engineer

EPAM Systems; Colombia; Remote; COP 90,000,000 - 130,000,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

Upskilling & certification courses

LinkedIn Learning access

Global career opportunities

Job summary

EPAM Systems Inc. seeks a Support Engineer to strengthen our security operations. You will monitor local and AWS environments, perform proactive threat hunting, and design incident response playbooks.

The role requires hands-on CrowdStrike Falcon, Splunk ES expertise, and strong IAM oversight, with clear reporting to stakeholders. The ideal candidate has 3+ years in network security, is proficient in email security, and knowledgeable about cloud security with AWS.

Qualifications

• At least 3 years of hands-on experience specializing in network security.
• Practical day-to-day work with the CrowdStrike Falcon platform for endpoint protection and threat remediation.
• Familiarity with electronic mail security strategies and solutions designed to intercept and stop phishing or message-based attacks.
• Extensive background in executing thorough security investigations to pinpoint and evaluate potential breaches.
• Demonstrated expertise in continuous security surveillance to spot and react to suspicious activity instantly.
• Direct operational involvement across diverse security operations disciplines.
• Working knowledge of Splunk Enterprise Security configured specifically for tracking, detection, and reporting tasks.
• English proficiency at the upper-intermediate level (B2) or higher.

Responsibilities

• Track local and AWS environments for hostile actions, intrusions, and anomalous, illicit, or unauthorized behavior.
• Observe identity and access management operations, including identifying any misuse of privileges by authorized personnel.
• Design SIEM and SOAR detection and mitigation procedures, deploying them as operational rules, while building, evaluating, and refining playbooks for incident response.
• Conduct proactive threat hunting exercises and contribute to wider threat intelligence workflows.
• Execute additional security administration tasks alongside primary monitoring duties.
• Produce clear and comprehensive status summaries for technical specialists, management, and stakeholders.

Skills

Threat hunting

Incident response

Security monitoring

IAM monitoring

Phishing defense

Splunk ES

CrowdStrike Falcon

AWS Security

Email security

Tools

CrowdStrike Falcon

Splunk ES

Palo Alto Cortex XSOAR

AWS Security services

Job description

We are seeking a Support Engineer to join our expanding team. This role is perfect for an individual who is deeply committed to protecting vital infrastructure and staying ahead of emerging cybersecurity threats. You will operate within a cooperative setting that emphasizes situational awareness, critical analysis, and transparent communication across both technical and business audiences. If you excel at preemptively detecting vulnerabilities and hardening organizational security defenses, this position provides a fantastic opportunity to deliver a lasting impactResponsibilitiesTrack local and AWS environments for hostile actions, intrusions, and anomalous, illicit, or unauthorized behaviorObserve identity and access management operations, including identifying any misuse of privileges by authorized personnelDesign SIEM and SOAR detection and mitigation procedures, deploying them as operational rules, while also building, evaluating, and refining playbooks to facilitate incident responseConduct proactive threat hunting exercises and contribute to wider threat intelligence workflowsExecute additional security administration tasks alongside primary monitoring dutiesProduce clear and comprehensive status summaries for technical specialists, management, and stakeholdersLeverage sophisticated analytical instruments to spot nascent threat trends and discover hidden system weaknessesRequirementsAt least 3 years of hands-on experience specializing in network securityPractical day-to-day work with the CrowdStrike Falcon platform for endpoint protection and threat remediationFamiliarity with electronic mail security strategies and solutions designed to intercept and stop phishing or message-based attacksExtensive background in executing thorough security investigations to pinpoint and evaluate potential breachesDemonstrated expertise in continuous security surveillance to spot and react to suspicious activity instantlyDirect operational involvement across diverse security operations disciplinesWorking knowledge of Splunk Enterprise Security configured specifically for tracking, detection, and reporting tasksEnglish proficiency at the upper-intermediate level (B2) or higherNice to havePrior background utilizing Amazon AWS Security services to safeguard cloud architectures and hosted assetsAcquaintance with Palo Alto Cortex XSOAR to assist with security orchestration and automated incident handlingWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedInEPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.