Lead Security Systems Engineer

We are seeking a Lead Security Systems Engineer to help design, implement, and maintain the technical security controls required to protect enterprise systems and data within a client’s evolving IT operating model.

This role will work closely with the Senior Security Architect to operationalize security strategies and ensure day-to-day security practices are in place. The engineer will also provide hands-on knowledge transfer to the client’s permanent hire for this role, ensuring continuity and operational readiness.

Responsibilities

• Configure, deploy, and maintain enterprise security systems such as IAM, SIEM, endpoint protection, and firewalls
• Implement security monitoring, alerting, and incident response capabilities
• Apply cloud security best practices across AWS, Azure, or GCP environments
• Engineer secure configurations for networks, servers, containers, and applications
• Automate security controls in CI/CD pipelines and improve operational efficiency
• Translate high-level security strategies into actionable technical solutions in collaboration with the Senior Security Architect
• Support vulnerability management processes including patching, scanning, and remediation
• Lead technical investigations of security incidents and coordinate corrective measures
• Perform root cause analysis and establish preventative safeguards to mitigate future risks
• Document system configurations, operational runbooks, and technical procedures for ongoing use
• Partner with the client’s permanent hire to transfer knowledge and ensure operational readiness

Requirements

• 5+ years of work experience in security engineering roles, including hands-on configuration of IAM, SIEM, and endpoint protection systems
• Proficiency in cloud security across AWS, Azure, or GCP
• Skills in secure network, server, and container configurations
• Expertise in security incident response, troubleshooting, and root cause analysis
• Familiarity with vulnerability management tools and processes
• Competency in automation and integration of security controls in CI/CD pipelines
• Background in collaborating with architects on security designs, compliance audits, and risk assessments
• Capability to explain complex technical concepts and mentor team members effectively
• Certification in a relevant security domain (e.g., CISSP, CEH, or similar)

We offer

• With us you can:
  • Work on a flexible schedule remotely or from any of our comfortable offices or coworking spaces in Ukraine
  • Receive the necessary equipment to perform your work tasks
  • Change projects and technology stacks within EPAM
  • Gain experience in various business domains (Insurance, E-commerce, Healthcare, Finance, Travelling, Media, Artificial Intelligence, and more)
  • Relocation opportunities may be available for eligible candidates, depending on the role and openings at other EPAM locations
  • Participate in volunteer, charity programs and communities (both technical and interest-based)
• We focus on your professional growth:
  • You can plan your individual career path together with your manager
  • Receive regular feedback from colleagues
  • Improve your English for free with certified teachers (Speaking Clubs, client interview preparation courses, etc.)
  • Get the opportunity to undergo free training and certification in AWS, GCP, or Azure Clouds
  • Use the internal E-learn training program (18,200+ specialized training and mentoring programs)
  • Access corporate accounts on LinkedIn Learning, Get Abstract and other partner resources
  • Study at EPAM Solution Architecture School with the instructors who are practicing architects
  • Develop as a leader, join Delivery Management, Resource Management, Leadership Essentials school and more
  • Participate in internal communities (500+ meetups, technical discussions, brainstorming sessions, online events and conferences annually)
• What we offer:
  • Vacation and sick leave (including a sick leave without a medical certificate)
  • A wide range of Voluntary Medical Insurance programs providing both medical treatment and various preventive options (including sports activities)
  • Medical insurance for family members at corporate rates
  • Company support during significant life events (childbirth or adoption, marriage, etc.)
  • Support for psychological comfort: discounts on services from mental health specialists or coaches, thematic training
  • E-kids program - a free programming language training program for EPAMers' children

Kindly note that this role supports remote work, but only from within Ukraine.

Kindly be advised that the set of benefits, including learning, certification, and other opportunities, may vary depending on the role you apply for. Our recruiter will be able to share more details about the specific opportunity during your general interview.

EPAM strives to provide its global team of over 61,700 professionals in more than 55 countries with opportunities for professional growth from day one of collaboration. Our colleagues are the source of EPAM's success, so we value cooperation, strive to always understand our clients' business and aim for the highest quality standards. No matter where you are, you will join a dedicated, diverse community that will help you realize your potential to the fullest.