EPAM SystemsRemote
Senior Security Engineer — AWS Cloud
United States of America
Full Time
3 hours ago
H1B Sponsor Likely
Key skills
AWS Cloud SecurityAWS IAMAWS VPCAmazon EC2AWS LambdaAmazon ECRAmazon ECSAmazon S3AWS CloudTrailAWS Certificate ManagerAmazon DynamoDBAmazon RedshiftAWS Key Management ServiceCI/CD pipelinesTerraformGitHubKubernetes architectureCrowdStrikeSecurity Operation CenterSnykCodefreshArgo CDSUMO LogicOktaPythonRedshiftAWSAzureGCPKubernetesECSEC2LambdaS3DynamoDBIAMSumo LogicCI/CDLeadershipCommunicationCollaborationCloud Security
About this role
EPAM Systems is seeking a Senior Security Engineer — AWS Cloud to join their client-facing team, focusing on enhancing cloud security standards. This hands-on role requires collaboration with senior leadership to address security issues and improve security processes and pipelines.
Responsibilities:
- Review and investigate Cloud security findings detected by CrowdStrike SOC and triage findings
- Work with various teams to remediate vulnerabilities and misconfigurations
- Address other security-related issues as they arise
- Update weekly and monthly security statistics for leadership
- Maintain and update Cloud Security processes including integrations, playbooks, custom alerts and documentation
- Provide evidence and documentation for yearly audits
- Triage Application Security vulnerabilities
- Triage Kubernetes Security vulnerabilities
Requirements:
- Minimum 3 years of working experience in cloud security or related roles
- Knowledge of AWS Cloud Security, its components and networking
- Expertise in AWS architecture and services such as IAM, VPC, Security Group, EC2, Lambda, ECR, ECS, S3, CloudTrail, ACM, DynamoDB, Redshift and KMS
- Skills in CI/CD pipelines for Security scans including creation, usage, architecture and maintenance
- Proficiency in Terraform and GitHub for infrastructure management
- Background in Kubernetes architecture, security and deployment using Terraform
- Competency in CrowdStrike, Security Operation Center and Snyk
- Familiarity with Codefresh, Argo CD and PerimeterX
- Understanding of SUMO Logic and Okta
- Capability to detect gaps in security coverage and provide solutions
- Investigation of security events across platforms and preparation of detailed reports
- Proven ability to work directly with clients and senior leadership without supervision
- Excellent verbal and written communication skills
- English proficiency at B2 level or higher for direct communication with US-based customer teams
- Application security experience
- Familiarity with DNS
- Skills in Python
- Background in Azure and GCP Cloud security for implementing security alerting and remediation
- Experience with Red Team exercises