Security Operations Engineer: Threat Hunting & SIEM

EPAM Systems Inc; United States; Remote; USD 85,000 - 120,000; Full time

Job summary

EPAM Systems Inc. seeks a Support Engineer focused on protecting critical infrastructure and mitigating cyber threats.

You will operate in a collaborative environment emphasizing situational awareness, analysis, and clear communication across technical and business audiences. Key duties include threat hunting, designing SIEM/SOAR playbooks, and monitoring local and cloud environments using CrowdStrike Falcon and Splunk ES.

Qualifications

• 3+ years in network security or equivalent.
• Experience with CrowdStrike Falcon for endpoint protection and remediation.
• Knowledge of email security and phishing prevention strategies.
• Extensive background in security investigations and incident handling.
• Proven ability to monitor and detect suspicious activity in real time.
• Operational experience across diverse security disciplines.
• Proficiency with Splunk Enterprise Security for tracking, detection and reporting.

Responsibilities

• Track local and AWS environments for hostile actions, intrusions, and anomalous, illicit, or unauthorized behavior.
• Observe identity and access management operations, detecting privilege misuse by authorized personnel.
• Design SIEM and SOAR detection and mitigation procedures and build playbooks for incident response.
• Conduct proactive threat hunting and contribute to threat intelligence workflows.
• Execute security administration tasks alongside primary monitoring duties.
• Produce clear status summaries for technical specialists, management, and stakeholders.
• Leverage analytical tools to spot nascent threat trends and uncover system weaknesses.

Skills

Network security

Threat hunting

Incident response

Security monitoring

English (B2+)

Tools

CrowdStrike Falcon

Splunk Enterprise Security

AWS security services

Palo Alto Cortex XSOAR

Job description

EPAM Systems Inc. seeks a Support Engineer focused on protecting critical infrastructure and mitigating cyber threats.

You will operate in a collaborative environment emphasizing situational awareness, analysis, and clear communication across technical and business audiences. Key duties include threat hunting, designing SIEM/SOAR playbooks, and monitoring local and cloud environments using CrowdStrike Falcon and Splunk ES.