EPAM Systems

Senior AI Security Engineer - Data & AI Platform

Brak informacji o wynagrodzeniu

SeniorZdalnie·WarszawaFull-time

#453846·Dodano 26 dni temu·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

Cloud securityTerraform Kubernetes Azure GCPGitOPSPolicy as CodeIdentity and Access Management

Podsumowanie oferty

As a Senior AI Security Engineer, you will secure AI workloads on enterprise cloud platforms including Azure and GCP. The role involves implementing AI Security Framework controls using Terraform, GitOps, and policy-as-code within CI/CD pipelines. You will collaborate with AI Security auditors and engineers to ensure compliance with governance standards such as ISO 27001, EU AI Act, and GDPR.

Wymagania

5+ years of experience in SDLC foundations and cloud platform engineering with an AI/ML focus
Security-first mindset with ability to translate control intent into defensible implementations alongside senior specialists
Hands-on experience with Azure, GCP, and Kubernetes (AKS/GKE) including GPU node pools and VNet/VPC segmentation
Expertise in Terraform, GitOps workflows, and policy-as-code within CI/CD pipelines (Azure DevOps, GitHub Actions)
Knowledge of IAM concepts including RBAC/ABAC least-privilege, managed/workload identity, and geo-aware risk-based access controls
Familiarity with hardened API integration layers, centralized MCP gateways, and LLM guardrails for prompt/response injection and content filtering
Proficiency in observability tools such as OpenTelemetry, Prometheus, Loki, Tempo, and Grafana for anomaly and drift detection
Understanding of data classification, training-data/model isolation, and model-theft prevention practices
Background in compliance frameworks including ISO 27001, EU AI Act, and GDPR
English proficiency at B2 level or higher

Obowiązki

Translate AI Security control descriptions into working platform configurations and defensible implementations
Engineer security controls as code using Terraform, GitOps CI/CD pipelines, and policy-as-code frameworks
Produce machine-verifiable evidence proving adherence to control descriptions
Implement Kubernetes GPU node pool segmentation, VNet/VPC isolation, and private endpoints across Azure and GCP
Configure RBAC/ABAC least-privilege access, managed/workload identity, and risk-based access controls
Build a hardened API integration layer and centralized gateway with tool-level access controls
Deploy LLM guardrails for prompt/response injection, content filtering, kill-switches, and inference rate limits
Set up observability pipelines for anomaly and drift detection, restricted-access logs, and end-to-end traceability
Maintain training-data and model isolation to support robustness and prevent model theft
Collaborate with Senior AI Security auditors and AI Engineers to ensure implementations pass governance consistently
Support classification and compliance efforts aligned with ISO 27001, EU AI Act, and GDPR requirements

Benefity

Opportunity to work with top tech minds in AI, cloud, and digital platform modernization
Supportive team and agile, startup-like culture
Hybrid by design and remote work opportunity within Poland
Chance to work abroad for up to 60 days annually
Business-driven relocation opportunities
Career development programs including mentoring, soft skills, and well-being
Certification opportunities (Anthropic, Gemini, GCP, Azure, AWS)
English language classes
Stable pay and Employee Stock Purchase Plan with 15% discount
Benefits package including health insurance, multisport, shopping vouchers
Referral bonuses up to $2,000
Offices with entertainment, relaxation zones, table tennis, football, free snacks, coffee
Corporate, social, and well-being events
Open to cooperation with contractors under individually agreed B2B terms

Elastyczne godziny

Pakiet relokacyjny

Szkolenia wewnętrzne

Budżet konferencyjny

Dofinansowanie szkoleń

Spotkania integracyjne

Kursy językowe

Karta sportowa

Opieka zdrowotna

Ubezpieczenie

Darmowe przekąski

Inne informacje

Klikając w przycisk „Aplikuj” lub w inny sposób wysyłając zgłoszenie rekrutacyjne, zgadzasz się na przetwarzanie Twoich danych osobowych przez EPAM Systems (Poland) sp. z o.o. z siedzibą w: Fabryczna 1A, 31-553 Kraków (Pracodawca), jako administratora danych osobowych w celu przeprowadzenia rekrutacji na stanowisko wskazane w ogłoszeniu zgodnie Polityką Prywatności.

EPAM Systems

1632 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz