We are looking for a skilled and motivated Chief Cybersecurity Engineer to join our team.

In this position, you will help advance day-to-day security operations and influence the wider security strategy. The ideal professional brings strong expertise and hands-on experience in cloud security, incident response, automation, and development. You will create, enhance, and run the security tooling that defends the client's infrastructure while shaping the overall security direction throughout the entire organization.

Responsibilities

• Plan, deploy, and maintain the client's security infrastructure to safeguard systems and data
• Foster security awareness across the organization and help end users perform their tasks securely without adding unnecessary friction
• Research and evaluate new threats, attack vectors, and risks, and outline effective mitigation strategies
• Review the output from security tools and software, and share findings with relevant stakeholders
• Work alongside engineering teams to offer feedback on products and preserve secure development environments
• Collaborate with cyber analysts and security engineers to build threat models, detections, and incident response playbooks, and keep tooling that enhances security intelligence in good shape

Requirements

• At least 7 years of relevant experience in a security-focused position
• A minimum of 2 years of leadership and team management experience
• Demonstrated ability to identify security gaps and risk areas, and to organize and carry out remediation efforts effectively
• Confidence working across technical and business teams, promoting security best practices, policies, and procedures
• Strong communication skills, both verbal and written
• Solid grasp of enterprise-scale security technologies, including SIEM, incident response, HIDS/NIDS, PKI, user behavior analytics, SSO, IAM, and Privileged Access Management
• Practical experience setting up and maintaining enterprise logging pipelines using tools such as Splunk, DataDog, ELK Stack, or Snowflake
• Hands-on experience developing infrastructure as code with Terraform or CloudFormation
• Deep applied security background across cloud providers such as AWS, GCP, or others, together with their respective security tooling (e.g., GuardDuty, CloudTrail, SecurityMonkey, ScoutSuite)
• Working experience with EDR (Endpoint Detection and Response) tools such as CrowdStrike, GRR, OSQuery, Sysdig, Carbon Black, Endgame, or Tanium
• Familiarity with development workflows and tools including Git, Jira, and Confluence
• Excellent English communication skills, both spoken and written (B2+ level or higher)

Nice to have

• Strong scripting abilities with languages such as Bash or Python for automating security operations
• Experience with vulnerability management for detecting, assessing, and remediating security weaknesses
• Cybersecurity certifications such as CISSP, CEH, Security+, or similar credentials
• Penetration testing background for uncovering and exploiting security vulnerabilities in controlled scenarios
• Hands-on experience with container technologies (Docker, EKS, GKE, Kubernetes, OpenShift) along with their related security tooling (e.g., Twistlock, StackRox, Aqua, Sysdig)
• Knowledge of SOAR, CASB, and DLP technologies for orchestrating security operations and securing sensitive data
• Comfort working with configuration management tools such as Chef, Puppet, or Ansible

We offer

• International projects with top brands
• Work with global teams of highly skilled, diverse peers
• Healthcare benefits
• Employee financial programs
• Paid time off and sick leave
• Upskilling, reskilling and certification courses
• Unlimited access to the LinkedIn Learning library and 22,000+ courses
• Global career opportunities
• Volunteer and community involvement opportunities
• EPAM Employee Groups
• Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn

EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.