Position: Security Systems Engineer
Company: EPAM Systems
Experience required: 2y
English level: intermediate

RESPONSIBILITIES: 

The Security Systems Engineer is responsible for implementation and maintaining security solutions in large enterprise environments, with thorough knowledge of systems engineering and security best practices
Working across various security domains such as Identity and Access Management; Privileged Access management; Data Protection and its application; Data Loss Prevention; Cryptography; Infrastructure/Cloud Security; Security operations (SOC, SIEM); Threat & Vulnerability Management; Business Continuity, Disaster Recovery; DevSecOps (Secure SDLC), and custom scripting around it
Plan, design and implement security solutions for multi-cloud systems and workloads
Utilize best security practices from various domains (public and private clouds, network, containerization and microservice, S-SDLC, etc.)
Collaborate with adjacent teams (engineering, infrastructure, development, database, operations, etc.)

REQUIREMENTS: 

- Direct Security-focused education (Bachelors+) OR proven equivalent experience
- 2+ years of security experience with any domain
- Successfully participated in at least one production security project
- Security engineering experience in at least one business domain
- Experience configuring security controls and policies (NIST SP 800-53)
- Understanding of at least one compliance/regulation such as ISO 2700x/PCI DSS/HIPAA/HITRUST/GDPR/SOX/FedRAMP
- Able to work closely with other project team roles (developers, BA, testers, architects, managers)
- Experience in bug/development tracking/change management systems
- Expected to be able to follow and understand a defined security process, train other team members, and contribute to process improvement
- Understanding of concepts of a Software development process, application, infrastructure/cloud security, and their assessment methodologies
- Hands-on proficiency and strong engineering background is a must
- Scripting/software development experience is a huge advantage
- Experience in service-oriented projects is an advantage
- Nice to have 1+ Security Certification such as GCP Professional Security - Engineer/AWS Security Specialty/Azure Security Technologies or equivalent knowledge
- Professional Security Certifications such as CISSP/CISM/CISA/ECSA/CCSK/SSCP is considered as an advantage