Senior BIOS & Firmware Security Engineer (Remote Poland)

Talanto

Kraków

Hybrid

PLN 180,000 - 300,000

Full time

9 days ago

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Hybrid work model

Remote within Poland

Relocation opportunities

Stock Purchase Plan 15% discount

Health insurance

Multisport

Well-being programs

English classes

Job summary

EPAM is seeking a Senior BIOS Engineer to support the BIOS and Firmware Security Team by performing BIOS security reviews and ensuring that BIOS signing requests are properly validated. This role provides operational support for firmware signing workflows, BIOS approval validation, troubleshooting activities, and user lifecycle management across the internal proprietary portal ecosystem.

You will review signing requests, analyze BIOS and Embedded Controller images to determine production vs test

Qualifications

Bachelor's degree in a relevant field or equivalent relevant experience.
1+ years of cybersecurity experience.
1+ years of experience in BIOS/Firmware security and testing.
Strong written and verbal communication and interpersonal skills.
Ability to work independently as well as function as an integral part of a team, take initiative and ownership in a fast-paced environment.
English proficiency at B2 level or higher.
Nice to have background in BIOS, firmware, or embedded system security.
Experience with source control systems such as git.
Experience with pre-boot (e.g., UEFI), embedded firmware, or device driver development.
Familiarity with security related technologies such as Secure Boot, TPM.
Knowledge of cryptographic key management and secure signing operations.
Skills in basic scripting using PowerShell, Python, or Bash.
Experience supporting enterprise security infrastructure and operational environments.
Experience administering Windows and/or Linux environments.
Experience troubleshooting infrastructure, networking, and application issues.

Responsibilities

Review BIOS and Embedded Controller signing requests submitted through the internal proprietary portal prior to signing approval.
Analyze BIOS and Embedded Controller images to determine production vs test versioning requiring expedited processing.
Validate BIOS and Embedded Controller images against approved baselines maintained in internal repositories and databases.
Compare incoming BIOS and Embedded Controller images with previously approved versions using internal analysis tools.
Identify image modifications and assess whether changes are limited to non-security-critical functionality.
Approve signing requests when images align with previously reviewed and approved firmware.
Escalate images containing significant modifications for formal security review.
Coordinate with internal teams regarding images requiring additional validation.
Support onboarding, offboarding, and access approval processes for application users, update permissions, and perform periodic access reviews.
Maintain access control documentation and audit records.
Document approval decisions and maintain audit records supporting firmware signing activities.
Support BIOS and firmware investigations and security review activities.