Security Architect

EPAM Systems; España; Presencial; EUR 90.000 - 140.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Private health insurance

EPAM Employees Stock Purchase Plan

100% paid sick leave

Referral Program

Professional certification

Language courses

Descripción de la vacante

EPAM Systems in Spain is seeking a Senior Security Architect to lead security architecture efforts for a global financial organization, working remotely with overlapping hours to 3 PM EST.

You will design, deploy and enhance security controls across infrastructure, applications, endpoints and cloud, ensuring confidentiality, integrity and availability enterprise-wide.

The role emphasizes DevSecOps, zero-trust principles and collaboration with MSPs and governance teams to meet KPI and SLA metrics.

Formación

• Extensive hands-on experience in security engineering and cybersecurity architecture within enterprise environments.
• Proven expertise in Endpoint and Cloud Workload Protection (Windows/Linux/MacOS, EPP, EDR, CWPP).
• Proven expertise in SIEM and log management (Splunk or equivalent).
• Proven expertise in network and cloud security foundations; NDR tools such as Darktrace, Vectra AI, and ExtraHop preferred.
• Proven expertise in database and application security (IBM Guardium, Oracle Data Safe).
• Strong knowledge of DevSecOps practices, automation frameworks and toolchains (Azure DevOps, Jenkins, Git, Maven, Nexus).
• Practical experience with scripting languages (PowerShell, Python, Bash) for automation and integration.
• Familiarity with PKI best practices, certificate/key management and security orchestration (SOAR).
• Ability to respond to security incidents, zero-day threat scenarios and advanced enterprise attack vectors.
• Excellent problem-solving, decision-making and stakeholder engagement skills.

Responsabilidades

• Design and implement security architectures for network, cloud, and endpoint platforms, ensuring alignment with reference standards and regulatory requirements.
• Configure, deploy and manage enterprise security tools, including EPP, EDR, XDR, CWPP for multi-OS environments and containerized platforms.
• Provide security hardening, vulnerability remediation plans, and automated security integration with development pipelines (DevSecOps).
• Integrate and optimize SIEM and Security Log Management platforms (e.g., Splunk, LogRhythm, Sentinel).
• Oversee Network Detection & Response (NDR) deployment and tuning for advanced traffic and threat analysis.
• Collaborate with Information Security Governance teams to maintain secure baseline configurations across infrastructure layers.
• Support or lead security tool upgrades, introducing new technologies to improve threat detection and response.
• Define architectural requirements and detailed procedures for tool selection, placement, and integration across cloud and on-prem environments.
• Work closely with MSPs, monitoring output vs SLAs for operational security services.
• Contribute to KPI, KRI and SLA metrics reporting for security programs.
• Lead capacity monitoring design and automation for scaling enterprise security platforms.

Conocimientos

Security architecture

Security engineering

DevSecOps

Automation

Scripting

Problem solving

Stakeholder engagement

Zero-trust

Herramientas

EPP

EDR

CWPP

Splunk

LogRhythm

Sentinel

Darktrace

Vectra AI

ExtraHop

Guardium

Data Safe

Azure DevOps

Jenkins

Git

Maven

Nexus

Descripción del empleo

We're looking for a Senior Security Architect to join our team in Spain in a remote working mode, with work hours overlapping until 3 PM EST. This long-term role involves leading security architecture efforts and implementing advanced cybersecurity platforms for a global financial organization. You will play a key role in designing, deploying, and enhancing security controls across infrastructure, applications, endpoints and cloud systems, ensuring enterprise-wide confidentiality, integrity and availability.

This is your opportunity to work on mission-critical cybersecurity architecture initiatives that safeguard financial systems at a global scale, leveraging cutting-edge security platforms and zero-trust principles.

Responsibilities

• Design and implement security architectures for network, cloud, and endpoint platforms, ensuring alignment with reference standards and regulatory requirements
• Configure, deploy and manage enterprise security tools, including EPP, EDR, XDR, CWPP for multi-OS environments and containerized platforms
• Provide security hardening, vulnerability remediation plans, and automated security integration with development pipelines (DevSecOps)
• Integrate and optimize SIEM and Security Log Management platforms (e.g., Splunk, LogRhythm, Sentinel)
• Oversee Network Detection & Response (NDR) deployment and tuning for advanced traffic and threat analysis
• Collaborate with Information Security Governance teams to maintain secure baseline configurations across infrastructure layers
• Support or lead security tool upgrades, introducing new technologies to improve threat detection and response
• Define architectural requirements and detailed procedures for tool selection, placement, and integration across cloud and on-prem environments
• Work closely with MSPs, monitoring output vs SLAs for operational security services
• Contribute to KPI, KRI and SLA metrics reporting for security programs
• Lead capacity monitoring design and automation for scaling enterprise security platforms

Requirements

• Extensive hands-on experience in security engineering and cybersecurity architecture within enterprise environments
• Proven expertise in Endpoint and Cloud Workload Protection (Windows/Linux/MacOS, EPP, EDR, CWPP)
• Proven expertise in SIEM and log management (Splunk or equivalent)
• Proven expertise in network and cloud security foundations; NDR tools such as Darktrace, Vectra AI, and ExtraHop preferred
• Proven expertise in database and application security (IBM Guardium, Oracle Data Safe)
• Strong knowledge of DevSecOps practices, automation frameworks and toolchains (Azure DevOps, Jenkins, Git, Maven, Nexus)
• Practical experience with scripting languages (e.g., PowerShell, Python, Bash) for automation and integration
• Familiarity with PKI best practices, certificate/key management and security orchestration (SOAR)
• Ability to respond to security incidents, zero-day threat scenarios and advanced enterprise attack vectors
• Excellent problem-solving, decision-making and stakeholder engagement skills

Nice to have

• Experience supervising upgrades of enterprise security technology stacks
• Exposure to capacity monitoring, scaling automation and AIOps-driven observability solutions
• Knowledge of ITIL processes and MSP governance practices
• Relevant security certifications (e.g., CISSP, CISM, CISA, CCSK)

We offer

• Private health insurance
• EPAM Employees Stock Purchase Plan
• 100% paid sick leave
• Referral Program
• Professional certification
• Language courses

EPAM is a leading digital transformation services and product engineering company with 61,700+ EPAMers in 55+ countries and regions. Since 1993, our multidisciplinary teams have been helping make the future real for our clients and communities around the world. In 2018, we opened an office in Spain that quickly grew to over 1,450 EPAMers distributed between the offices in Málaga, Madrid and Cáceres as well as remotely across the country. Here you will collaborate with multinational teams, contribute to numerous innovative projects, and have an opportunity to learn and grow continuously.

• Why Join EPAM
• WORK AND LIFE BALANCE. Enjoy more of your personal time with flexible work options, 24 working days of annual leave and paid time off for numerous public holidays.
• CONTINUOUS LEARNING CULTURE. Craft your personal Career Development Plan to align with your learning objectives. Take advantage of internal training, mentorship, sponsored certifications and LinkedIn courses.
• CLEAR AND DIFFERENT CAREER PATHS. Grow in engineering or managerial direction to become a People Manager, in-depth technical specialist, Solution Architect, or Project/Delivery Manager.
• STRONG PROFESSIONAL COMMUNITY. Join a global EPAM community of highly skilled experts and connect with them to solve challenges, exchange ideas, share expertise and make friends.