[Hiring] Chief Security Platform Engineer @EPAM

Role Description

We are seeking a Chief Security Platform Engineer to design, build, and operate scalable security controls across multi-cloud and modern delivery pipelines. You will drive automation and platform reliability while partnering with teams to measurably reduce risk.

• Design security controls across cloud, network, identity, endpoint, data, and software supply chain environments
• Build and operate security platforms end-to-end with a focus on reliability, scalability, and measurable outcomes
• Implement cloud security controls across Amazon Web Services, Microsoft Azure, and Google Cloud Platform
• Automate security enforcement using Infrastructure as Code and Policy as Code practices
• Develop security tooling and automation in Python to reduce risk and improve developer experience
• Integrate security guardrails into CI/CD workflows, including secrets management and dependency controls
• Detect and respond to threats by improving monitoring, alerting, and operational runbooks
• Optimize existing controls through workflow refinement and deeper integration with engineering processes
• Partner with Security Operations and engineering teams to align on priorities and response playbooks
• Leverage AI-enabled tools to accelerate analysis, documentation, and operational efficiency

Qualifications

• 8+ years of experience in security engineering, platform engineering, or related roles
• Proven leadership experience owning security platforms end-to-end and driving measurable outcomes
• Strong project delivery skills coordinating cross-functional security and engineering initiatives
• Hands-on cloud experience with Amazon Web Services, Microsoft Azure, and Google Cloud Platform
• Strong infrastructure security knowledge across identity, network, endpoint, data, and supply chain domains
• Proficient Python programming skills for security tooling and automation
• Strong DevOps and CI/CD security knowledge including pipeline governance and secrets management
• Strong monitoring and incident response skills across alerting, triage, and continuous improvement
• Solid systems administration knowledge across Windows and Linux environments
• Effective communication skills to influence stakeholders and document security standards clearly
• English proficiency: B2 (Upper-Intermediate)

Requirements

• Nice to have Ansible experience for automation and configuration management
• Kubernetes experience with container and cloud-native security
• Cloud Security Posture Management and CNAPP experience, including Wiz CSPM
• Open Policy Agent experience for policy enforcement
• Microsoft Sentinel experience for detection and response workflows