Lead Security Engineer

We are seeking a highly skilled Lead Security Engineer to drive the design, implementation, and oversight of security solutions within our AWS environments.

This role requires deep expertise in AWS security services, third-party security tools, and governance frameworks to ensure the highest levels of data protection and compliance.

Responsibilities

• Design, implement, and manage security architecture using AWS native tools (IAM, GuardDuty, Security Hub, CloudTrail, KMS)
• Deploy and oversee CSPM solutions to maintain a secure cloud environment
• Define and enforce network security measures, including VPC security groups and firewalls
• Manage encryption protocols, key lifecycle processes, and data protection strategies
• Integrate third-party tools for SIEM, vulnerability management, and threat detection
• Lead incident response efforts and support remediation of identified vulnerabilities
• Align technical controls with GRC frameworks such as ISO 27001, NIST CSF, and other regulatory requirements
• Provide leadership and mentorship to security operations and engineering teams
• Establish best practices for operational and application security within cloud environments
• Track and evaluate emerging threats and recommend proactive security measures

Requirements

• 7-10 years of experience in implementing and securing AWS architectures
• Expertise in CSPM, IAM, and AWS-native security services (GuardDuty, Security Hub, WAF, CloudTrail)
• Proficiency in network security tools and concepts, including firewalls, NSGs, and VPC security configurations
• Strong understanding of encryption technologies and key management systems
• Background in governance frameworks such as ISO 27001 and risk models like NIST CSF
• Skills in integrating and optimizing third-party tools for vulnerability analysis and threat management
• Capability to conduct risk assessments and develop risk mitigation strategies
• Familiarity with security posture improvement tools and comprehensive auditing methods

We offer

• We gather like-minded people:
  • Engineering community of industry professionals
  • Friendly team and enjoyable working environment
  • Flexible schedule and opportunity to work remotely within Poland
  • Chance to work abroad for up to 60 days annually
  • Business-driven relocation opportunities
• We provide growth opportunities:
  • Outstanding career roadmap
  • Leadership development, career advising, soft skills, and well-being programs
  • Certification (GCP, Azure, AWS)
  • Unlimited access to LinkedIn Learning, Get Abstract, Cloud Guru
  • English classes
• We cover it all:
  • Stable income (Employment Contract or B2B)
  • Participation in the Employee Stock Purchase Plan
  • Benefits package (health insurance, multisport, shopping vouchers)
  • Strategically located offices featuring entertainment and relaxation zones, table tennis and football, free snacks, fantastic coffee, and more
  • Referral bonuses
  • Corporate, social and well-being events
• Please, note:
  • The set of bonuses might vary based on the role you apply for – specifics will be discussed with our recruiter during the general interview.
  • We will reach out to selected candidates exclusively.

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.