Security Architect

EPAM Systems; España; On-site; PHP 6,536,000 - 10,167,000; Full time

Benefits offered by this job

Private health insurance

EPAM Employees Stock Purchase Plan

100% paid sick leave

Referral Program

Professional certification

Language courses

Job summary

EPAM Systems in Spain is seeking a Senior Security Architect for a remote role with overlapping hours until 3 PM EST. You will design, deploy and enhance security controls across infrastructure, applications, endpoints and cloud systems for a global financial organization.

You will lead mission-critical cybersecurity architecture initiatives, leverage cutting-edge platforms, and implement zero-trust principles to safeguard enterprise systems globally.

Qualifications

• Extensive hands-on security engineering and architecture experience in enterprise settings.
• Proven expertise in Endpoint and Cloud Workload Protection (Windows/Linux/MacOS).
• Proven expertise in SIEM/log management (Splunk).
• Strong knowledge of DevSecOps, automation and toolchains (Azure DevOps/Jenkins/Git).
• Familiarity with PKI, certificates, SOAR and incident response.

Responsibilities

• Design and implement security architectures for network, cloud, and endpoints across environments.
• Configure and manage security tools (EPP, EDR, XDR, CWPP) across multi-OS and containers.
• Provide hardening, remediation plans, and DevSecOps integrations with pipelines.
• Integrate SIEM/Log Management (Splunk, LogRhythm, Sentinel) and optimize detections.
• Lead NDR deployment and tuning for advanced threat analysis.
• Collaborate with governance teams to maintain secure baselines.

Skills

Security architecture

Security engineering

DevSecOps

Scripting

Cloud security

Endpoint security

Fluent English

Tools

Splunk

EDR

EPP

CWPP

Darktrace

Vectra AI

ExtraHop

IBM Guardium

Oracle Data Safe

Job description

We're looking for a Senior Security Architect to join our team in Spain in a remote working mode, with work hours overlapping until 3 PM EST. This long-term role involves leading security architecture efforts and implementing advanced cybersecurity platforms for a global financial organization. You will play a key role in designing, deploying, and enhancing security controls across infrastructure, applications, endpoints and cloud systems, ensuring enterprise-wide confidentiality, integrity and availability.

This is your opportunity to work on mission‑critical cybersecurity architecture initiatives that safeguard financial systems at a global scale, leveraging cutting‑edge security platforms and zero‑trust principles.

Responsibilities

• Design and implement security architectures for network, cloud, and endpoint platforms, ensuring alignment with reference standards and regulatory requirements


• Configure, deploy and manage enterprise security tools, including EPP, EDR, XDR, CWPP for multi‑OS environments and containerized platforms


• Provide security hardening, vulnerability remediation plans, and automated security integration with development pipelines (DevSecOps)


• Integrate and optimize SIEM and Security Log Management platforms (e.g., Splunk, LogRhythm, Sentinel)


• Oversee Network Detection & Response (NDR) deployment and tuning for advanced traffic and threat analysis


• Collaborate with Information Security Governance teams to maintain secure baseline configurations across infrastructure layers


• Support or lead security tool upgrades, introducing new technologies to improve threat detection and response


• Define architectural requirements and detailed procedures for tool selection, placement, and integration across cloud and on‑prem environments


• Work closely with MSPs, monitoring output vs SLAs for operational security services


• Contribute to KPI, KRI and SLA metrics reporting for security programs


• Lead capacity monitoring design and automation for scaling enterprise security platforms

Requirements

• Extensive hands‑on experience in security engineering and cybersecurity architecture within enterprise environments


• Proven expertise in Endpoint and Cloud Workload Protection (Windows/Linux/MacOS, EPP, EDR, CWPP)


• Proven expertise in SIEM and log management (Splunk or equivalent)


• Proven expertise in network and cloud security foundations; NDR tools such as Darktrace, Vectra AI, and ExtraHop preferred


• Proven expertise in database and application security (IBM Guardium, Oracle Data Safe)


• Strong knowledge of DevSecOps practices, automation frameworks and toolchains (Azure DevOps, Jenkins, Git, Maven, Nexus)


• Practical experience with scripting languages (e.g., PowerShell, Python, Bash) for automation and integration


• Familiarity with PKI best practices, certificate/key management and security orchestration (SOAR)


• Ability to respond to security incidents, zero‑day threat scenarios and advanced enterprise attack vectors


• Excellent problem‑solving, decision‑making and stakeholder engagement skills


• Fluent English; excellent written and verbal communication

Nice to have

• Experience supervising upgrades of enterprise security technology stacks


• Exposure to capacity monitoring, scaling automation and AIOps‑driven observability solutions


• Knowledge of ITIL processes and MSP governance practices


• Relevant security certifications (e.g., CISSP, CISM, CISA, CCSK)

We offer

• Private health insurance


• EPAM Employees Stock Purchase Plan


• 100% paid sick leave


• Referral Program


• Professional certification


• Language courses

EPAM is a leading digital transformation services and product engineering company with 61,700+ EPAMers in 55+ countries and regions. Since 1993, our multidisciplinary teams have been helping make the future real for our clients and communities around the world. In 2018, we opened an office in Spain that quickly grew to over 1,450 EPAMers distributed between the offices in Málaga, Madrid and Cáceres as well as remotely across the country. Here you will collaborate with multinational teams, contribute to numerous innovative projects, and have an opportunity to learn and grow continuously.

Why Join EPAM

• WORK AND LIFE BALANCE. Enjoy more of your personal time with flexible work options, 24 working days of annual leave and paid time off for numerous public holidays.


• CONTINUOUS LEARNING CULTURE. Craft your personal Career Development Plan to align with your learning objectives. Take advantage of internal training, mentorship, sponsored certifications and LinkedIn courses.


• CLEAR AND DIFFERENT CAREER PATHS. Grow in engineering or managerial direction to become a People Manager, in‑depth technical specialist, Solution Architect, or Project/Delivery Manager.


• STRONG PROFESSIONAL COMMUNITY. Join a global EPAM community of highly skilled experts and connect with them to solve challenges, exchange ideas, share expertise and make friends.