Platform Security Consultant

EPAM Systems; United States; Remote; USD 110,000 - 150,000; Part time

Job summary

EPAM Systems is seeking an interim Platform Security Consultant to influence projects toward secure by design and to manage security coverage across processes, systems, and operations. You will partner with DevOps and business teams to translate requirements into practical guidelines and remediation actions.

You will build specialized knowledge of security areas like data protection, cloud, and digital security while expanding consulting capabilities and mentoring colleagues across the

Qualifications

• Bachelor's degree or equivalent in IT, Information Systems Security, Cybersecurity, or related field.
• 4+ years of IT and information security experience.
• Expertise in at least one area: application security, SDLC, or perimeter network security.
• Knowledge of cloud, mobile, and digital security including data protection methods.
• Familiarity with security-related legal and regulatory requirements.
• Understanding of the retail industry.
• Strong communication and presentation skills.
• Ability to act independently with minimal supervision.
• Advanced English proficiency (C1) with exceptional written and verbal communication.

Responsibilities

• Act as the one-stop shop for any security-related topic, needs, requirements, guidelines, and incidents
• Formally assess information security risks related to solution and business projects, determine the potential impact of those risks, and conduct follow-up on any necessary remediation efforts throughout the project lifecycle
• Collaborate hand in hand with DevOps teams (developers, product owners, business) to translate domain and ISO requirements into practical operational guidelines
• Conduct initial and ongoing formal assessments of information security risks related to vendors, determine the potential impact of those risks, and follow up on remediation efforts
• Develop specialized knowledge of and key relationships with local brands, ensuring that security is embedded in each brand and that their security needs are being met
• Partner with team members to identify opportunities for implementing common security solutions or leveraging existing ones
• Drive strategies and efforts to facilitate business ownership of data, including creating necessary tools for identification and tracking of data repositories, training materials, and professional presentations
• Demonstrate specialized knowledge, including data protection methods, in at least one of the following areas: application security, SDLC, perimeter network security, cloud, mobile, or digital
• Share expertise with other team members to facilitate ongoing activities
• Actively expand consulting and assessment capabilities through training courses, mentoring, and daily interaction with internal customers

Skills

Information security

Risk assessment

Cloud security

Data protection

SDLC

Perimeter network security

Information technology

Education

Bachelor's degree

Master's degree preferred

Job description

We are seeking an interim Platform Security Consultant to join our team. In this role, you will be a key contributor in supporting the concept of "secure by design," influencing projects and operations to implement adequate and proportionate security coverage across Business and IT processes, systems, and operations. You will help manage the growing risk posture of our organization as our vendor landscape continues to evolve.

Responsibilities

• Act as the one-stop shop for any security-related topic, needs, requirements, guidelines, and incidents
• Formally assess information security risks related to solution and business projects, determine the potential impact of those risks, and conduct follow-up on any necessary remediation efforts throughout the project lifecycle
• Collaborate hand in hand with DevOps teams (developers, product owners, business) to translate domain and ISO requirements into practical operational guidelines
• Conduct initial and ongoing formal assessments of information security risks related to vendors, determine the potential impact of those risks, and follow up on remediation efforts
• Develop specialized knowledge of and key relationships with local brands, ensuring that security is embedded in each brand and that their security needs are being met
• Partner with team members to identify opportunities for implementing common security solutions or leveraging existing ones
• Drive strategies and efforts to facilitate business ownership of data, including creating necessary tools for identification and tracking of data repositories, training materials, and professional presentations
• Demonstrate specialized knowledge, including data protection methods, in at least one of the following areas: application security, SDLC, perimeter network security, cloud, mobile, or digital
• Share expertise with other team members to facilitate ongoing activities
• Actively expand consulting and assessment capabilities through training courses, mentoring, and daily interaction with internal customers

Requirements

• Bachelor's degree or equivalent technical training in Information Technology, Information Systems Security, Cybersecurity, or a related field (Master's degree preferred)
• 4+ years of relevant IT and Information Security experience
• Expertise in at least one of the following areas: application security, SDLC, or perimeter network security
• Knowledge of cloud, mobile, and digital security, including data protection methods
• Familiarity with security-related legal and regulatory requirements
• Understanding of the retail industry
• Solid communication and presentation skills
• Ability to act independently with minimal supervision
• Advanced English proficiency (C1) with exceptional written and verbal communication skills

Nice to have

• Knowledge of Dutch