Lead Azure AI Security Engineer

EPAM Systems; Turkey; Hybrid; TRY 400,000 - 700,000; Full time

Benefits offered by this job

Continuous upskilling

Mentoring programs

English courses

Private health insurance

Job summary

EPAM Systems seeks a Lead Azure AI Security Engineer to provide technical leadership in securing Azure and Microsoft cloud environments at enterprise scale. You will design and improve security architecture across Azure, M365, Entra ID and multi-clouds, with emphasis on AI-powered automation and secure-by-design principles.

The role requires hands-on expertise in Defender for Cloud, Entra ID, Defender XDR, SIEM/SOAR, and DevSecOps, plus strong scripting in PowerShell and Python.

Qualifications

• Experience securing Azure/Microsoft cloud environments at enterprise scale.
• Hands-on with Entra ID, Defender for Cloud and Defender XDR.
• Proficiency in Azure governance, identity, and data protection controls.
• Familiarity with CI/CD, DevSecOps and secure-by-design principles.

Responsibilities

• Provide technical leadership in securing Azure and Microsoft cloud environments at enterprise scale.
• Design, implement and improve security architecture across Azure, M365, Entra ID and multi-clouds.
• Develop and maintain automation scripts and tooling using PowerShell, Python, and Azure services.
• Collaborate with engineering, DevOps and security teams to embed security into the delivery lifecycle.

Skills

Azure Security

Cloud security concepts

DevSecOps

PowerShell

Python

KQL

Logic Apps

Azure CLI

AI-assisted automation

Education

Bachelor's degree in Computer Science or equivalent

Tools

Microsoft Defender for Cloud

Microsoft Entra ID

Azure Active Directory

SIEM/SOAR

Azure Policy

KQL

Logic Apps

Azure Functions

Terraform/Bicep

Azure Monitor/Log Analytics

Job description

We are looking for a Lead Azure AI Security Engineer to provide technical leadership and subject matter expertise in securing Azure and Microsoft cloud environments at enterprise scale. In this role, you will design and improve security architecture while leveraging AI-powered tools to automate and enhance daily security engineering activities across hybrid and multi-cloud environments.ResponsibilitiesProvide technical leadership and subject matter expertise in securing Azure and Microsoft cloud environments at enterprise scaleDesign, implement and improve security architecture across Azure, Microsoft 365, Microsoft Entra ID, hybrid and multi-cloud environments, with Azure as the primary cloud platformWork across key cloud security domains including CSPM/CNAPP, Identity and Access Management, Privileged Access Management, Data Protection and Data Loss Prevention, Microsoft Defender security stack, SIEM/SOAR, Business Continuity and Disaster Recovery, DevSecOps, container and Kubernetes security and policy-as-codePlan, design and implement security controls for cloud workloads, applications, infrastructure and dataCollaboration with engineering, infrastructure, development, DevOps, database, operations and compliance teams to embed security into the full delivery lifecycleSupport implementation and continuous improvement of Zero Trust architecture, secure authentication, conditional access, least privilege and identity protectionDevelop and maintain automation scripts, workflows and security tooling using PowerShell, Python, Azure CLI, Logic Apps, Azure Functions, KQL and REST APIsUse AI-powered tools and agentic workflows to automate and improve security activities such as findings triage, log analysis, incident investigation support, configuration review, compliance evidence collection and vulnerability analysisDesign or integrate AI agents and AI-assisted automations using modern AI platforms and frameworks while ensuring proper security, privacy and governance controlsContribute to secure adoption of AI technologies by defining guardrails for data protection, access control, prompt security, model usage, auditability and human-in-the-loop processesTrain and support other team members on cloud security practices, security processes and AI-assisted automation approachesRequirementsBachelor's degree in Computer Science, Information Security, Engineering or equivalent practical experience3+ years of experience in software developmentHands-on experience with Microsoft Azure servicesStrong understanding of cloud security concepts, Azure architecture and enterprise-scale cloud environmentsPractical experience with Microsoft Entra ID/Azure Active Directory, Microsoft Defender for Cloud and Microsoft Defender XDRSkills in Microsoft Sentinel, Microsoft Purview and Microsoft IntuneProficiency in Conditional Access, Identity Protection and Privileged Identity ManagementCompetency in Key Vault, Azure Policy and Azure Monitor/Log AnalyticsStrong engineering background including experience with Active Directory, Microsoft Entra ID, Microsoft 365, Exchange Online and hybrid identitySecurity engineering experience in at least one business or technology domain along with participation in at least several production projectsUnderstanding of software development lifecycle, DevOps/DevSecOps practices, cloud security assessment methodologies and secure-by-design principlesAbility to work closely with developers, business analysts, QA engineers, architects, project managers, infrastructure and operations teams and to follow, maintain and improve defined security processesPractical understanding of AI-assisted productivity and automation including building or configuring AI agents, integrating LLMs with tools, APIs and workflows, prompt engineering and using AI tools securely with awareness of sensitive data handlingGood communication skills and ability to explain security risks, technical decisions and remediation plans to both technical and non-technical stakeholdersNice to haveSkills in scripting and automation using PowerShell, Python, Bash, Azure CLI, Terraform or BicepFamiliarity with SIEM/SOAR platforms, especially Microsoft Sentinel, KQL and Logic AppsExperience with CNAPP/CSPM/CWPP/CIEM tools such as Prisma Cloud, Wiz and Orca or Lacework, Check Point CloudGuard and CrowdStrike or Tenable and Rapid7Understanding of compliance frameworks such as ISO 27001, NIST and CIS Benchmarks or PCI DSS, HIPAA and HITRUSTKnowledge of container and Kubernetes security including AKS, container registries and image scanningFamiliarity with AI/LLM platforms such as Azure OpenAI, Azure AI Foundry and Microsoft Copilot Studio or Semantic Kernel, LangChain and AutoGenUnderstanding of AI security risks including data leakage, prompt injection, excessive agency and AI supply chain risksExperience implementing AI governance and secure AI usage policies aligned with frameworks such as NIST AI RMF, OWASP Top 10 for LLM Applications or ISO/IEC 42001AZ-500, SC-100, SC-200SC-300, SC-400, AZ-104AZ-305, CISSP, CISMCISA, CCSK, CCSP, SSCPAI-900, AI-102, PL-900/PL-200We offerCONTINUOUS UPSKILLING, LEARNING & DEVELOPMENTDiversity of tasks and projectsAssessment center for objective review of competency levelPersonal development planMentoring programs and leadership developmentCertification and professional development supportAccess to learning platforms including more than 2,500 internal coursesEnglish courses taught by certified teachersCORPORATE BENEFITSExtra leave daysReferral bonusesCOMPENSATION PACKAGECompetitive compensation paid in USDRegular salary and performance reviewsMEDICAL & HEALTHCAREPrivate health insuranceWell-being eventsWORKING ENVIRONMENTRecreation areas and kitchensTea, coffee and snacksSports equipment and game consolesIT EquipmentMicrosoft’s Software Assurance Home Use Program (HUP)Please note that our Talent Attraction Team reviews applications and CVs submitted in English.EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.