Support Engineer

EPAM Systems; United States; Remote; USD 85,000 - 120,000; Full time

Job summary

EPAM Systems Inc. seeks a Support Engineer focused on protecting critical infrastructure and mitigating cyber threats.

You will operate in a collaborative environment emphasizing situational awareness, analysis, and clear communication across technical and business audiences. Key duties include threat hunting, designing SIEM/SOAR playbooks, and monitoring local and cloud environments using CrowdStrike Falcon and Splunk ES.

Qualifications

• 3+ years in network security or equivalent.
• Experience with CrowdStrike Falcon for endpoint protection and remediation.
• Knowledge of email security and phishing prevention strategies.
• Extensive background in security investigations and incident handling.
• Proven ability to monitor and detect suspicious activity in real time.
• Operational experience across diverse security disciplines.
• Proficiency with Splunk Enterprise Security for tracking, detection and reporting.

Responsibilities

• Track local and AWS environments for hostile actions, intrusions, and anomalous, illicit, or unauthorized behavior.
• Observe identity and access management operations, detecting privilege misuse by authorized personnel.
• Design SIEM and SOAR detection and mitigation procedures and build playbooks for incident response.
• Conduct proactive threat hunting and contribute to threat intelligence workflows.
• Execute security administration tasks alongside primary monitoring duties.
• Produce clear status summaries for technical specialists, management, and stakeholders.
• Leverage analytical tools to spot nascent threat trends and uncover system weaknesses.

Skills

Network security

Threat hunting

Incident response

Security monitoring

English (B2+)

Tools

CrowdStrike Falcon

Splunk Enterprise Security

AWS security services

Palo Alto Cortex XSOAR

Job description

We are seeking a Support Engineer to join our expanding team. This role is perfect for an individual who is deeply committed to protecting vital infrastructure and staying ahead of emerging cybersecurity threats. You will operate within a cooperative setting that emphasizes situational awareness, critical analysis, and transparent communication across both technical and business audiences. If you excel at preemptively detecting vulnerabilities and hardening organizational security defenses, this position provides a fantastic opportunity to deliver a lasting impact

Responsibilities

• Track local and AWS environments for hostile actions, intrusions, and anomalous, illicit, or unauthorized behavior
• Observe identity and access management operations, including identifying any misuse of privileges by authorized personnel
• Design SIEM and SOAR detection and mitigation procedures, deploying them as operational rules, while also building, evaluating, and refining playbooks to facilitate incident response
• Conduct proactive threat hunting exercises and contribute to wider threat intelligence workflows
• Execute additional security administration tasks alongside primary monitoring duties
• Produce clear and comprehensive status summaries for technical specialists, management, and stakeholders
• Leverage sophisticated analytical instruments to spot nascent threat trends and discover hidden system weaknesses

Requirements

• At least 3 years of hands-on experience specializing in network security
• Practical day-to-day work with the CrowdStrike Falcon platform for endpoint protection and threat remediation
• Familiarity with electronic mail security strategies and solutions designed to intercept and stop phishing or message-based attacks
• Extensive background in executing thorough security investigations to pinpoint and evaluate potential breaches
• Demonstrated expertise in continuous security surveillance to spot and react to suspicious activity instantly
• Direct operational involvement across diverse security operations disciplines
• Working knowledge of Splunk Enterprise Security configured specifically for tracking, detection, and reporting tasks
• English proficiency at the upper-intermediate level (B2) or higher

Nice to have

• Prior background utilizing Amazon AWS Security services to safeguard cloud architectures and hosted assets
• Acquaintance with Palo Alto Cortex XSOAR to assist with security orchestration and automated incident handling