Senior AI Security Engineer - Data & AI Platform

Brak informacji o wynagrodzeniu
SeniorZdalnie·ŁódźFull-time
#453828·Dodano 7 dni temu·0
Źródło: justjoin.it
Aplikuj teraz

Tech Stack / Keywords

TerraformKubernetesAI securityGitOPSAzureGCPIAMPolicy as Code

Firma i stanowisko

EPAM is a global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, the company empowers clients to become AI-native enterprises, driving measurable value from innovation and digital investments.

Wymagania

  • 5+ years of experience in SDLC foundations and cloud platform engineering with AI/ML focus
  • Security-first mindset with ability to translate control intent into defensible implementations alongside senior specialists
  • Hands-on experience with Azure, GCP, and Kubernetes (AKS/GKE) including GPU node pools and VNet/VPC segmentation
  • Expertise in Terraform, GitOps workflows, and policy-as-code within CI/CD pipelines (Azure DevOps, GitHub Actions)
  • Knowledge of IAM concepts including RBAC/ABAC least-privilege, managed/workload identity, and geo-aware risk-based access controls
  • Familiarity with hardened API integration layers, centralized MCP gateways, and LLM guardrails for prompt/response injection and content filtering
  • Proficiency in observability tools such as OpenTelemetry, Prometheus, Loki, Tempo, and Grafana for anomaly and drift detection
  • Understanding of data classification, training-data/model isolation, and model-theft prevention practices
  • Background in compliance frameworks including ISO 27001, EU AI Act, and GDPR
  • English proficiency at B2 level or higher

Obowiązki

  • Translate AI Security control descriptions into working platform configurations and defensible implementations
  • Engineer security controls as code using Terraform, GitOps CI/CD pipelines, and policy-as-code frameworks
  • Produce machine-verifiable evidence proving adherence to control descriptions
  • Implement Kubernetes GPU node pool segmentation, VNet/VPC isolation, and private endpoints on Azure and GCP
  • Configure RBAC/ABAC least-privilege access, managed/workload identity, and risk-based access controls
  • Build a hardened API integration layer and centralized gateway with tool-level access controls
  • Deploy LLM guardrails for prompt/response injection, content filtering, kill-switches, and inference rate limits
  • Set up observability pipelines for anomaly and drift detection using tools such as OpenTelemetry, Prometheus, Loki, Tempo, and Grafana
  • Maintain training-data and model isolation to support robustness and prevent model theft
  • Collaborate with Senior AI Security auditors and AI Engineers to ensure governance compliance
  • Support classification and compliance efforts aligned with ISO 27001, EU AI Act, and GDPR requirements

Benefity

  • Work with top tech minds driving innovation in AI, cloud, and digital platform modernization
  • Supportive team and agile, startup-like culture
  • Hybrid work mode with remote work opportunities within Poland
  • Chance to work abroad up to 60 days annually
  • Business-driven relocation opportunities
  • Career development programs, mentoring, soft skills, and well-being programs
  • Certification opportunities (Anthropic, Gemini, GCP, Azure, AWS)
  • English language classes
  • Stable pay and participation in Employee Stock Purchase Plan with 15% discount
  • Benefits package including health insurance, multisport, shopping vouchers
  • Referral bonuses up to $2,000
  • Offices with entertainment and relaxation zones, table tennis, football, free snacks, coffee
  • Corporate, social, and well-being events
  • Open to working with contractors; B2B terms agreed individually
Karta sportowa
Opieka zdrowotna
Ubezpieczenie
Premie
Udziały pracownicze
Kursy językowe

Inne informacje

Klikając w przycisk „Aplikuj” lub w inny sposób wysyłając zgłoszenie rekrutacyjne, zgadzasz się na przetwarzanie Twoich danych osobowych przez EPAM Systems (Poland) sp. z o.o. z siedzibą w: Fabryczna 1A, 31-553 Kraków (Pracodawca), jako administratora danych osobowych w celu przeprowadzenia rekrutacji na stanowisko wskazane w ogłoszeniu zgodnie Polityką Prywatności dostępną na stronie: https://www.epam.com/applicant-privacy-notice

EPAM Systems

EPAM Systems

1484 aktywne oferty

Zobacz wszystkie oferty
Aplikuj teraz