Senior BIOS Engineer

Talanto; Kraków; Hybrid; PLN 180,000 - 300,000; Full time

Benefits offered by this job

Hybrid work model

Remote within Poland

Relocation opportunities

Stock Purchase Plan 15% discount

Health insurance

Multisport

Well-being programs

English classes

Job summary

EPAM is seeking a Senior BIOS Engineer to support the BIOS and Firmware Security Team by performing BIOS security reviews and ensuring that BIOS signing requests are properly validated. This role provides operational support for firmware signing workflows, BIOS approval validation, troubleshooting activities, and user lifecycle management across the internal proprietary portal ecosystem.

You will review signing requests, analyze BIOS and Embedded Controller images to determine production vs test

Qualifications

• Bachelor's degree in a relevant field or equivalent relevant experience.
• 1+ years of cybersecurity experience.
• 1+ years of experience in BIOS/Firmware security and testing.
• Strong written and verbal communication and interpersonal skills.
• Ability to work independently as well as function as an integral part of a team, take initiative and ownership in a fast-paced environment.
• English proficiency at B2 level or higher.
• Nice to have background in BIOS, firmware, or embedded system security.
• Experience with source control systems such as git.
• Experience with pre-boot (e.g., UEFI), embedded firmware, or device driver development.
• Familiarity with security related technologies such as Secure Boot, TPM.
• Knowledge of cryptographic key management and secure signing operations.
• Skills in basic scripting using PowerShell, Python, or Bash.
• Experience supporting enterprise security infrastructure and operational environments.
• Experience administering Windows and/or Linux environments.
• Experience troubleshooting infrastructure, networking, and application issues.

Responsibilities

• Review BIOS and Embedded Controller signing requests submitted through the internal proprietary portal prior to signing approval.
• Analyze BIOS and Embedded Controller images to determine production vs test versioning requiring expedited processing.
• Validate BIOS and Embedded Controller images against approved baselines maintained in internal repositories and databases.
• Compare incoming BIOS and Embedded Controller images with previously approved versions using internal analysis tools.
• Identify image modifications and assess whether changes are limited to non-security-critical functionality.
• Approve signing requests when images align with previously reviewed and approved firmware.
• Escalate images containing significant modifications for formal security review.
• Coordinate with internal teams regarding images requiring additional validation.
• Support onboarding, offboarding, and access approval processes for application users, update permissions, and perform periodic access reviews.
• Maintain access control documentation and audit records.
• Document approval decisions and maintain audit records supporting firmware signing activities.
• Support BIOS and firmware investigations and security review activities.

Skills

Cybersecurity

BIOS/Firmware security

Pre-boot (UEFI)

Scripting (Python/PowerShell/Bash)

Git

Windows/Linux

English communication

Education

Bachelor's degree in a relevant field

Tools

Git

PowerShell

Python

Bash

UEFI

Embedded firmware

Windows

Linux

Job description

Important: if an employer asks you to log into their system via iCloud or Google, send a code, an SMS or Telegram password, run some code, or install software — refuse. These are signs of fraud.

We are seeking a Senior BIOS Engineer to support the BIOS and Firmware Security Team by performing BIOS security reviews and ensuring that BIOS signing requests are properly validated. This role provides operational support for firmware signing workflows, BIOS approval validation, troubleshooting activities, and user lifecycle management across the internal proprietary portal ecosystem.ResponsibilitiesReview BIOS and Embedded Controller signing requests submitted through the internal proprietary portal prior to signing approvalAnalyze BIOS and Embedded Controller images to determine production vs test versioning requiring expedited processingValidate BIOS and Embedded Controller images against approved baselines maintained in internal repositories and databasesCompare incoming BIOS and Embedded Controller images with previously approved versions using internal analysis toolsIdentify image modifications and assess whether changes are limited to non-security-critical functionalityApprove signing requests when images align with previously reviewed and approved firmwareEscalate images containing significant modifications for formal security reviewCoordinate with internal teams regarding images requiring additional validationSupport onboarding, offboarding, and access approval processes for application users, update permissions, and perform periodic access reviewsMaintain access control documentation and audit recordsDocument approval decisions and maintain audit records supporting firmware signing activitiesSupport BIOS and firmware investigations and security review activitiesRequirementsBachelor's degree in a relevant field or equivalent relevant experience1+ years of cybersecurity experience1+ years of experience in BIOS/Firmware security and testingStrong written and verbal communication and interpersonal skillsAbility to work independently as well as function as an integral part of a team, take initiative and ownership in a fast-paced environmentEnglish proficiency at B2 level or higherNice to haveBackground in BIOS, firmware, or embedded system securityExperience with source control systems such as gitExperience with pre-boot (e.g., UEFI), embedded firmware, or device driver developmentFamiliarity with security related technologies such as Secure Boot, TPMKnowledge of cryptographic key management and secure signing operationsSkills in basic scripting using PowerShell, Python, or BashExperience supporting enterprise security infrastructure and operational environmentsExperience administering Windows and/or Linux environmentsExperience troubleshooting infrastructure, networking, and application issuesWe offerWe gather like-minded people:Top tech minds driving innovation in AI, cloud and digital platform modernizationSupportive team and agile, startup-like cultureHybrid by design mode and opportunity to work remotely within PolandChance to work abroad for up to 60 days annuallyBusiness-driven relocation opportunitiesWe provide growth opportunities:Career development programsThought leadership, mentoring, soft skills and well-being programsCertification (Anthropic, Gemini, GCP, Azure, AWS)English classesWe cover it all:Stable payParticipation in the Employee Stock Purchase Plan with a 15% discountBenefits package (health insurance, multisport, shopping vouchers)Referral bonuses up to $2,000Offices featuring entertainment and relaxation zones, table tennis and football, free snacks, coffee and moreCorporate, social and well-being eventsPlease, note:Benefits listed above are available to employees onlyWe are open for working with Contractors. Terms of B2B cooperation agreements are agreed individuallyWe will reach out to selected candidates exclusivelyEPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.