Senior BIOS Engineer

EPAM Systems; Kraków; Hybrid; PLN 140,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

Remote within Poland

Relocation opportunities

English classes

Stock Purchase Plan

Health insurance

Well-being programs

Job summary

EPAM Systems in Kraków is seeking a Senior BIOS Engineer to support the BIOS and Firmware Security Team. You will perform BIOS security reviews, validate signing requests, and troubleshoot signing workflows in a hybrid Poland-based role.

The position requires a Bachelor's degree (or equivalent) and 1+ years of cybersecurity and BIOS/firmware security experience, with strong communication and teamwork skills. English at B2 level is required.

Qualifications

• Bachelor's degree in a relevant field or equivalent experience.
• 1+ years of cybersecurity experience.
• 1+ years of BIOS/Firmware security and testing experience.
• Strong written and verbal communication skills.
• Ability to work independently and as part of a team in a fast-paced environment.
• English proficiency at B2 level or higher.

Responsibilities

• Review BIOS and Embedded Controller signing requests in the internal portal.
• Analyze BIOS and Embedded Controller images for production vs test versioning.
• Validate images against baselines in internal repositories/databases.
• Compare images with previously approved versions using internal tools.
• Identify modifications and assess non-security-critical changes.
• Approve signing requests aligned with prior reviews, escalate significant changes.
• Coordinate with internal teams for additional validation.

Skills

Cybersecurity experience

BIOS/Firmware security

Communication

Education

Bachelor's degree or equivalent

Tools

Git

Job description

We are seeking a Senior BIOS Engineer to support the BIOS and Firmware Security Team by performing BIOS security reviews and ensuring that BIOS signing requests are properly validated. This role provides operational support for firmware signing workflows, BIOS approval validation, troubleshooting activities, and user lifecycle management across the internal proprietary portal ecosystem.

Responsibilities

• Review BIOS and Embedded Controller signing requests submitted through the internal proprietary portal prior to signing approval
• Analyze BIOS and Embedded Controller images to determine production vs test versioning requiring expedited processing
• Validate BIOS and Embedded Controller images against approved baselines maintained in internal repositories and databases
• Compare incoming BIOS and Embedded Controller images with previously approved versions using internal analysis tools
• Identify image modifications and assess whether changes are limited to non-security-critical functionality
• Approve signing requests when images align with previously reviewed and approved firmware
• Escalate images containing significant modifications for formal security review
• Coordinate with internal teams regarding images requiring additional validation
• Support onboarding, offboarding, and access approval processes for application users, update permissions, and perform periodic access reviews
• Maintain access control documentation and audit records
• Document approval decisions and maintain audit records supporting firmware signing activities
• Support BIOS and firmware investigations and security review activities

Requirements

• Bachelor's degree in a relevant field or equivalent relevant experience
• 1+ years of cybersecurity experience
• 1+ years of experience in BIOS/Firmware security and testing
• Strong written and verbal communication and interpersonal skills
• Ability to work independently as well as function as an integral part of a team, take initiative and ownership in a fast-paced environment
• English proficiency at B2 level or higher

Nice to have

• Background in BIOS, firmware, or embedded system security
• Experience with source control systems such as git
• Experience with pre-boot (e.g., UEFI), embedded firmware, or device driver development
• Familiarity with security related technologies such as Secure Boot, TPM
• Knowledge of cryptographic key management and secure signing operations
• Skills in basic scripting using PowerShell, Python, or Bash
• Experience supporting enterprise security infrastructure and operational environments
• Experience administering Windows and/or Linux environments
• Experience troubleshooting infrastructure, networking, and application issues

We offer

• We gather like-minded people:
  • Top tech minds driving innovation in AI, cloud and digital platform modernization
  • Supportive team and agile, startup-like culture
• Hybrid by design mode and opportunity to work remotely within Poland
• Chance to work abroad for up to 60 days annually
• Business-driven relocation opportunities
• We provide growth opportunities:
  • Career development programs
  • Thought leadership, mentoring, soft skills and well-being programs
  • Certification (Anthropic, Gemini, GCP, Azure, AWS)
  • English classes
• We cover it all:
  • Stable pay
  • Participation in the Employee Stock Purchase Plan with a 15% discount
  • Benefits package (health insurance, multisport, shopping vouchers)
  • Referral bonuses up to $2,000
• Offices featuring entertainment and relaxation zones, table tennis and football, free snacks, coffee and more
• Corporate, social and well-being events
• Please, note:
  • Benefits listed above are available to employees only
• We are open for working with Contractors. Terms of B2B cooperation agreements are agreed individually
• We will reach out to selected candidates exclusively

EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.