Senior Security Engineer Jobs

EPAM Anywhere is looking for Senior Security Engineers.

Competitive compensation

We back all payments and operate in compliance with country-specific labor regulations. Your annual paycheck can range from $15k to $200k.

Numerous benefits

Make use of 1,500+ online and location-specific benefits across 30+ countries that also include healthcare and sports programs for you and your family.

Limitless career growth opportunities

Get access to a large-scale ecosystem that consists of educational and career development services created for your growth. A personal skill advisor will support you on each step of this journey.

middle security engineer

Security.Engineering

SOC (Security Operations Center), Security Investigations, Security Monitoring

40 hrs/week

12+ months

Colombia

We are hiring a Middle Security Engineer to join our remote team.

In this role, you will be responsible for monitoring on-prem and AWS infrastructure for attacks, intrusions, and unusual, unauthorized, or illegal activity. Additionally, you will create SIEM and SOAR detection and remediation scenarios, perform threat hunting, and generate reports for both technical and non-technical staff and stakeholders. You will be working with advanced analytic tools to determine emerging threat patterns and vulnerabilities using Splunk, CrowdStrike, AWS Guard Duty, Cortex XSOAR, and PaloAlto.

responsibilities

Monitor on-prem and AWS infrastructure for attacks, intrusions, and unusual, unauthorized, or illegal activity
Create SIEM and SOAR detection and remediation scenarios, and implement them as rules. Create, test, and update playbooks
Perform threat hunting and support threat intelligence processes
Generate reports for both technical and non-technical staff and stakeholders
Use advanced analytic tools to determine emerging threat patterns and vulnerabilities
Collaborate with cross-functional teams and vendors for effective and timely security operations

requirements

2+ years of relevant experience in Internet security, networking protocols, and related technologies, including IDS/IPS, firewalls, content filtering, Network Behavior Analysis tools, Anti-malware, and packet inspection
Experience with security investigation and monitoring techniques such as SOC (Security Operations Center), security monitoring, and security investigations
Good working knowledge of Splunk Enterprise Security and Cortex XSOAR
Advanced knowledge of AWS Cloud Security
Experience with CrowdStrike Products and Services
Working knowledge of Linux and Windows operating systems
Experience with network security devices and protocols
Experience in Bash, PowerShell, and Python scripting languages
Fluent in English, both written and spoken, with an Upper-Intermediate level

nice to have

Experience with network security devices and protocols
Experience in Linux administration and networking
Experience with Firewalls (F5, Juniper, Check Point, Palo Alto, Cisco)

senior security engineer

Security.Engineering

SOC (Security Operations Center), Security Investigations, Security Monitoring

40 hrs/week

12+ months

Colombia

We are looking for a Senior Security Engineer to join our remote team.

Your primary focus will be to monitor the on-prem and AWS infrastructure for attacks, intrusions, and unusual, unauthorized, or illegal activity. You will be responsible for creating SIEM and SOAR detection and remediation scenarios, and implementing them as rules, as well as performing threat hunting and supporting threat intelligence processes. Your excellent knowledge of security monitoring, investigations, and relevant tools will enable you to generate reports for both technical and non-technical staff and stakeholders.

responsibilities

Monitor on-prem and AWS infrastructure for attacks, intrusions, and unusual, unauthorized, or illegal activity
Monitor identity and access management, including monitoring for abuse of permissions by authorized system users
Create SIEM and SOAR detection and remediation scenarios and implement them as rules. Create, test, and update playbooks
Perform threat hunting and support threat intelligence processes
Generate reports for both technical and non-technical staff and stakeholders
Use advanced analytic tools to determine emerging threat patterns and vulnerabilities
Work collaboratively with cross-functional teams to achieve project goals
Engage with your mentor for continuous learning and development of technical and soft skills

requirements

3+ years of experience in Information Security or related field, with a focus on SOC (Security Operations Center) operations
Hands-on experience with Splunk Enterprise Security, AWS Cloud Security, and Cortex XSOAR
Experience with CrowdStrike Products and Services, Linux, PowerShell, Python, and Windows
Familiarity with network security protocols and related technologies, including IDS/IPS, firewalls, content filtering, Network Behavior Analysis tools, Anti-malware, and packet inspection
Experience with SIEM solutions such as Splunk, QRadar, ArcSight, LogRhythm, ELK, Wazuh, Apache Metron, OSSIM, etc.
Experience with SIRP/SOAR tools like TheHive, Cortex, Phantom, Demisto, Resilient, etc.
Thorough understanding of host and network security hardening, common intrusion techniques, and common risk management concepts
Excellent communication skills in English, with an Upper-Intermediate level competency

nice to have

Experience with Firewalls (F5, Juniper, Check Point, Palo Alto, Cisco)

application security engineer

Security.Risks

Application Security, Code Review, DAST (Dynamic application security testing)

40 hrs/week

12+ months

Colombia

We are looking for an Application Security Engineer to join our remote team.

Your primary focus will be to ensure our Customer's information systems' confidentiality, integrity, and availability. You will work with various security tools and technologies to ensure that applications and gaming systems are secure. If you are one step ahead of the bad guys and passionate about security, we would love to hear from you!

responsibilities

Perform application security assessments on internal, and external applications, while defining and updating an application security methodology
Keep apprised of secure coding best practices and assist with static/dynamic code analysis
Design, create, test, document, deploy, and maintain new automation, capabilities, and security services for the InfoSec team
Stay abreast of Customer's applications and their security posture
Define and develop InfoSec training on web-based exploits/tools and corresponding mitigation techniques
Collaborate with cross-functional teams to build complex solutions

requirements

2+ years of experience in Information Security principles, technology, and control processes
development experience building systems in languages such as Python, C++, Golang/Rust
Expertise in application security, code review, DAST (Dynamic Application Security Testing), and SAST (Static Application Security Testing)
Experience with Secure Coding and AppSec frameworks (OWASP Guide, SANS CWE Top 25, CERT Secure Coding)
Hands-on experience in implementing secure SDLC practices
Good understanding of DevOps principles, Docker container security, and Kubernetes
Experience working with and setting up services on AWS infrastructure
Experience in threat modeling and implementing security testing methodologies like OWASP Top 10
Understand and be able to apply concepts such as algorithms, data structures, OOO design, databases
CEH and Offensive Security Certification (OSCP, GPEN, or GWAPT)
Excellent oral and written communication skills, including report writing and technical documentation
Fluent in English with an Upper-Intermediate level of proficiency

nice to have

Experience in CI/CD systems and knowing how to work with Terraform
Familiarity with Java

senior cloud security engineer

Security.Engineering

Kusto Query Language, Microsoft Azure, Microsoft Sentinel

40 hrs/week

12+ months

India, Poland

We are seeking a Senior Cloud Security Engineer to join our remote team.

As a Cloud Security Engineer with expertise in Microsoft Azure, you will be responsible for providing technical leadership and subject matter expertise in Cloud environments on an enterprise scale. You will be working across various cloud security domains such as Cloud Security Posture Management, Identity and Access Management, Data Protection, Incident Response Automation, and custom scripting. This role requires a deep understanding of cloud engineering and excellent knowledge of security best practices, standards, compliance, and regulations.

responsibilities

Provide technical leadership and subject matter expertise in Cloud environments on an enterprise scale
Plan, design, and implement security solutions for multi-cloud systems and workloads with public cloud providers (Azure, AWS)
Collaborate with adjacent teams (engineering, infrastructure, development, database, operations, etc.)
Work across various cloud security domains such as Cloud Security Posture Management, Identity and Access Management, Data Protection, Incident Response Automation, and custom scripting
Ensure security solutions align with the needs of the target market and the business objectives of our customer
Follow and understand a defined security process, train other team members, and contribute to process improvement
Engage with your mentor for continuous learning and development of technical and soft skills

requirements

Minimum of 3 years experience as a Security Engineer, with a strong focus on Cloud Security Engineering
Experience with Microsoft Azure, MS Sentinel, Plunk, and KQL
Direct Computer Science education (Bachelors+) OR equivalent experience
Experience with any domain at an enterprise scale
Ability to work closely with other project team roles like developers, compliance analysts, BA, testers, architects, managers, and endpoint engineers
Hands-on experience with scripting (any of: Python, JavaScript, PowerShell)
Office 365 operational and generic email security experience
CSPM tool experience (Defender for Cloud, PaloAlto Prisma)
Understanding of concepts of DevOps, cloud security, and their assessment methodologies

nice to have

Hands-on experience with public cloud providers (Azure, AWS) services
Security engineering experience in at least IAM, SOC, DLP domains
Understanding of at least one compliance/regulation such as ISO 2700x / PCI DSS / HIPAA / HITRUST / GDPR / SOX / FedRAMP
1+ Security Certification such as AZ-900, AZ-103, AZ-500, MS-500, MS-100, MS-101, AWS certified security specialty
Professional Security Certifications such as CISSP, CCSK / SSCP are considered an advantage
ServiceNow integration, AzureDevops, administration experience

senior application security engineer

Security.Risks

Application Security, Code Review, DAST (Dynamic application security testing)

40 hrs/week

12+ months

Colombia

We're on the lookout for a Senior Application Security Engineer to join our remote team.

Your main role will be safeguarding the confidentiality, integrity, and availability of our Customer's information systems. You'll employ various security tools and technologies to ensure the security of applications and gaming systems. If you're always one step ahead of cybercriminals and have a passion for security, we're eager to connect with you!

responsibilities

Conducting application security assessments on internal and external applications, and defining and updating an application security methodology
Staying informed about secure coding best practices and aiding with static/dynamic code analysis
Designing, creating, testing, documenting, deploying, and maintaining new automation capabilities and security services for the InfoSec team
Keeping up-to-date with the Customer's applications and their security posture
Defining and developing InfoSec training on web-based exploits/tools and corresponding mitigation techniques
Collaborating with cross-functional teams to build complex solutions

requirements

A minimum of 3 years' experience in Information Security principles, technology, and control processes
Development experience in building systems using languages such as Python, C++, Golang/Rust
Expertise in application security, code review, DAST (Dynamic Application Security Testing), and SAST (Static Application Security Testing)
Experience with Secure Coding and AppSec frameworks (OWASP Guide, SANS CWE Top 25, CERT Secure Coding)
Practical experience in implementing secure SDLC practices
Solid understanding of DevOps principles, Docker container security, and Kubernetes
Experience in working with and setting up services on AWS infrastructure
Experience in threat modeling and implementing security testing methodologies like OWASP Top 10
Understanding and application of concepts such as algorithms, data structures, OOO design, databases
CEH and Offensive Security Certification (OSCP, GPEN, or GWAPT)
Excellent oral and written communication skills, including report writing and technical documentation
Fluent in English with an Upper-Intermediate level of proficiency

nice to have

Experience with CI/CD systems and Terraform
Knowledge of Java

lead cloud security engineer

Security.Engineering

Kusto Query Language, Microsoft Azure, Microsoft Sentinel

40 hrs/week

12+ months

India, Poland

Join our remote team as a Lead Cloud Security Engineer.

Join our remote team as a Lead Cloud Security Engineer . In this role, you will provide technical leadership and expertise in Cloud (Azure, AWS) environments at an enterprise level. Your responsibilities will include comprehensive knowledge of cloud engineering and a firm grasp on security best practices, compliance, and regulations. You will work across various cloud security domains to plan, design, and implement security solutions for multi-cloud systems and workloads with public cloud providers (Azure, AWS). Your collaboration with adjacent teams (engineering, infrastructure, development, database, operations, etc.) will be key to seamless project completion.

responsibilities

Offering technical leadership and expert knowledge in Cloud (Azure, AWS) environments on an enterprise scale
Planning, designing, and implementing security solutions for multi-cloud systems and workloads with public cloud providers (Azure, AWS)
Collaborating with adjacent teams (engineering, infrastructure, development, database, operations, etc.) for seamless project completion
Ensuring adherence to security best practices, compliance standards, and regulations
Training team members and contributing to process improvement
Working under the guidance of a mentor to enhance skills, adapt to the company's recruitment processes, and meet recruitment targets
Having scripting experience in at least one of the following: Python, JavaScript, PowerShell

requirements

A Bachelor's degree in Computer Science or relevant experience
A minimum of 5 years of experience in Security Engineering at the enterprise level
At least 1 year of experience in leading software development teams with strong leadership skills
Hands-on experience with MS Sentinel, Splunk, KQL, and Azure cloud
A deep understanding of cloud security and their assessment methodologies
Proven ability to work closely with other project team roles (developers, compliance analysts, BA, testers, architects, managers, endpoint engineers)
Hands-on experience with Microsoft public cloud services and a strong engineering background
Scripting experience in Python, JavaScript, PowerShell
Experience with CSPM tools such as Defender for Cloud, PaloAlto Prisma
Familiarity with DevOps and cloud security concepts, and their assessment methodologies
Fluency in English, enabling effective communication with team members and stakeholders

nice to have

Hands-on experience with public cloud providers (Azure, AWS) services
Security engineering experience in at least IAM, SOC, and DLP domains
Familiarity with at least one compliance/regulation such as ISO 2700x / PCI DSS / HIPAA / HITRUST / GDPR / SOX / FedRAMP
Security Certification such as AZ-900, AZ-103, AZ-500, MS-500, MS-100, MS-101, AWS certified security specialty
Professional Security Certifications such as CISSP, and CCSK / SSCP considered an advantage
Experience with ServiceNow integration, AzureDevops, and administration

chief python developer - security automation

Python.Core

API Gateways, AWS Lambda, Amazon Web Services

40 hrs/week

12+ months

India

We are seeking a skilled remote Chief Python Developer to lead our Security Automation project for a client.

You will be collaborating with cross-functional teams to develop, test, and maintain scalable security automation solutions for our client and be responsible for developing and implementing REST API's using serverless frameworks like AWS Lambda. You will work with a variety of data sources to pull, validate, and automate reporting of security scans of applications before go-live.

responsibilities

Work with a variety of data sources to pull, validate and automate reporting of security scans of applications before go-live
Develop and implement REST API's using serverless frameworks like AWS Lambda
Lead and mentor the team of experienced engineers
Collaborate with cross-functional teams to design, develop, test, and maintain scalable security automation solutions
Create and maintain technical documentation related to the project
Ensure code quality, scalability, and maintainability
Contribute to the continuous improvement of development processes and best practices

requirements

7+ years of experience in Python development
2+ years of relevant leadership experience
Experience with Amazon Web Services (AWS) and serverless frameworks like AWS Lambda
Strong understanding of REST API design principles and experience with API Gateways
Knowledge of GitLab
Excellent communicational and organizational skills
B2+ English level proficiency

lead python developer - security automation

Python.Core

API Gateways, AWS Lambda, Amazon Web Services

40 hrs/week

12+ months

India

We are seeking a remote Lead Python Developer to lead our Security Automation project for a client.

As the Lead Python developer, you will be responsible for collaborating with cross-functional teams to develop, test, and maintain scalable security automation solutions for our client. Your primary focus will be on developing and implementing REST API's using serverless frameworks like AWS Lambda. You will work with a variety of data sources to pull, validate, and automate reporting of security scans of applications before go-live.

responsibilities

Collaborate with cross-functional teams to design, develop, test, and maintain scalable security automation solutions
Work with a variety of data sources to pull, validate and automate reporting of security scans of applications before go-live
Develop and implement REST API's using serverless frameworks like AWS Lambda
Create and maintain technical documentation related to the project
Ensure code quality, scalability, and maintainability
Lead and mentor other developers
Contribute to the continuous improvement of development processes and best practices

requirements

At least 5 years of experience in Python development
1+ years of relevant leadership experience
Strong understanding of REST API design principles and experience with API Gateways
Experience with Amazon Web Services (AWS) and serverless frameworks like AWS Lambda
Proficiency with GitLab
Excellent communication skills in English, both written and verbal at a B2+ level

lead devops engineer

Microsoft Azure

Azure Kubernetes Service, Azure Security, Network Security

40 hrs/week

12+ months

India

We are seeking a remote Lead DevOps Engineer to join our team and take responsibility for ensuring the security and reliability of our Azure infrastructure.

You will play a critical role in driving the successful implementation of innovative solutions within the industry. You will be responsible for leading a talented team of developers and engineers, ensuring that the team delivers high-quality software while fostering a collaborative and growth-oriented environment.

responsibilities

Lead the implementation and maintenance of Azure infrastructure, ensuring its reliability and security
Collaborate with the cloud infrastructure team to ensure compliance with security standards and procedures
Identify and remediate vulnerabilities in the infrastructure, responding to security alerts and implementing recommendations for improving the security posture
Track open security tasks and request exceptions to the global team as needed
Lead and mentor a talented team of developers and engineers, fostering a collaborative and growth-oriented environment
Drive innovation and continuous improvement in development practices and technologies
Create well-written documentation and procedures, and develop dashboards and reports to provide transparency and visibility for strategic initiatives

requirements

Minimum 5+ years of Hands-on experience with provisioning, configuring, and securing Azure solutions y
1+ years of relevant leadership experience
Expertise in network security and hub-and-spoke architectures, as well as experience with Palo Alto and other network virtual appliances (NVAs)
Proficiency in scripting/automation and CI/CD in Azure
Strong experience with Azure Cloud services, including MS Defender for Cloud/CSPM, WebApps, Virtual Machines, and Databases/Cosmos DB and MS SQL
Strong experience in deploying and configuring container services (Docker, Kubernetes, Azure Container Service)
Working knowledge of Salesforce integration, and familiarity with cloud security best practices (encryption, certificate management, network security, etc.)
Ability to solve technical, business, and process-related challenges through infrastructure-as-a-service or platform-as-a-service
Good understanding of operation management technologies, including log aggregation, server monitoring, process monitoring, and application monitoring
B2+ English level proficiency

nice to have

Experience with Terraform, enabling efficient infrastructure provisioning and configuration
Familiarity with Datadog for application monitoring and troubleshooting

senior devops engineer

Microsoft Azure

Azure Kubernetes Service, Azure Security, Network Security

40 hrs/week

12+ months

Colombia

We are seeking a highly skilled Senior DevOps Engineer to join our remote team, collaborating on a project that involves securing and optimizing Microsoft Azure solutions for a global company.

As a Senior DevOps Engineer, you will be responsible for provisioning, configuring, securing, and optimizing Azure solutions, with a particular focus on container services, network security, and Azure DevOps. You will also be responsible for monitoring and analyzing internal security tools, identifying vulnerabilities in infrastructure, and providing actionable remediation tasks. As a key figure within the team, you will be expected to provide recommendations and implement them, as well as track open security tasks and request exceptions to the Global Infosec team, if required.

responsibilities

Provision, configure, secure, and optimize Azure solutions, with a particular focus on container services, network security, and Azure DevOps
Monitor and analyze internal security tools, identifying vulnerabilities in infrastructure, and providing actionable remediation tasks
Provide recommendations and implement them, as well as track open security tasks and request exceptions to the Global Infosec team, if required
Collaborate with cross-functional teams to deliver high-quality software solutions in line with project goals and timelines
Create well-written documentation and procedures and create dashboards and reports to provide transparency and visibility for the results of strategic initiatives
Collaborate with stakeholders, demonstrating excellent communication and leadership skills
Provide expertise and guidance to the team, fostering a culture of growth and continuous learning within the group

requirements

Minimum of 3 years of hands-on experience with provisioning, configuring, and securing Azure solutions
Strong experience in scripting and automating and CI/CD in Azure
Solid experience in deployment and functionality of container services, such as Docker, Kubernetes, and Azure Container Service
Experience with Azure Cloud services, such as MS Defender for Cloud/CSPM, network/hub-and-spoke, and NVAs/Palo Alto
Familiarity with WebApps, Azure Kubernetes Service, Virtual Machines, and databases, such as Cosmos DB and MS SQL
Working knowledge of integration with Salesforce
Ability to solve technical, business, and/or process-related challenges through infrastructure-as-a-service or platform-as-a-service
Working experience or a good understanding of Cloud Security, including encryption, certificate management, and network security
Good understanding of operation management technologies, such as log aggregation, server monitoring, process monitoring, and application monitoring
Ability to create well-written documentation and procedures and create dashboards and reports to provide transparency and visibility for the results of strategic initiatives
English language proficiency at an Upper-Intermediate level or above, allowing effective written and spoken communication with the team and stakeholders

nice to have

Experience with Datadog for monitoring and observability
Experience with other cloud providers and infrastructure-as-code tools, such as AWS and Google Cloud Platform, and Ansible for automation

Senior Security Engineer Jobs

Other skills