Senior Cloud Security Engineer - DevSecOps & SIEM

EPAM Systems, Inc.; Poland; Hybrid; PLN 200,000 - 320,000; Full time

Benefits offered by this job

Health insurance

Multisport

Shopping vouchers

Employee stock purchase plan (15% off)

Job summary

EPAM Systems, Inc. is seeking a Senior Security Engineer to build and operate application and cloud security programs.

You will work hands-on across DevSecOps tooling, cloud and Kubernetes security, and SIEM operations, partnering with development teams and the SOC to raise the security bar without slowing teams down. You will configure and maintain security tooling across AWS, Azure, Kubernetes, and Linux, monitor cloud posture, and drive remediation of misconfigurations.

Qualifications

• 5+ years of DevSecOps tooling experience with CI/CD integrations.
• Strong vulnerability management including triage and remediation tracking.
• Hands-on experience with SIEM platforms and cloud security posture management.
• Ability to review code for security flaws and provide actionable fixes.
• Familiarity with Kubernetes security patterns and incident response.

Responsibilities

• Configure and maintain SAST, vulnerability, and container scanning in GitLab CI.
• Partner with developers on vulnerability analysis, secure code review, and remediation.
• Deploy and maintain security tooling across AWS, Azure, Kubernetes, and Linux VMs.
• Monitor cloud security posture and drive remediation of misconfigurations.
• Collaborate with SOC on incident detection, response, and reporting.
• Lead vulnerability scanning, triage, and remediation tracking for infra and apps.

Skills

DevSecOps expertise

Python

Bash

Vulnerability management

SIEM

Azure Sentinel

CNAPP/CSPM Wiz

AWS

Azure

Terraform

Kubernetes

Helm

Incident response

Threat modeling

Compliance knowledge (SOC 2, ISO 27001

NIST 800-53

Tools

GitLab CI/CD

Terraform

Kubernetes

Helm

Azure Sentinel

Wiz CNAPP/CSPM

AWS

Azure

Job description

EPAM Systems, Inc. is seeking a Senior Security Engineer to build and operate application and cloud security programs.

You will work hands-on across DevSecOps tooling, cloud and Kubernetes security, and SIEM operations, partnering with development teams and the SOC to raise the security bar without slowing teams down. You will configure and maintain security tooling across AWS, Azure, Kubernetes, and Linux, monitor cloud posture, and drive remediation of misconfigurations.