EPAM Systems

Senior AI Security Engineer - Data & AI Platform

Brak informacji o wynagrodzeniu

SeniorZdalnie·KrakówFull-time

#453849·Dodano 17 dni temu·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

AI securityTerraform Kubernetes Azure GCPGitOPSPolicy as CodeIAMOpenTelemetryModel Governance

Podsumowanie oferty

The Senior AI Security Engineer will work on securing Enterprise and Scientific AI workloads on Azure and GCP platforms by translating AI Security Framework controls into platform configurations. The role focuses on engineering security as code using Terraform, GitOps CI/CD pipelines, and policy-as-code ensuring platform compliance and governance. The engineer will collaborate with auditors and AI engineers to maintain security and compliance standards.

Wymagania

5+ years of experience in SDLC foundations and cloud platform engineering with an AI/ML focus
Security-first mindset with ability to translate control intent into defensible implementations
Hands-on experience with Azure, GCP, and Kubernetes (AKS/GKE) including GPU node pools and VNet/VPC segmentation
Expertise in Terraform, GitOps workflows, and policy-as-code within CI/CD pipelines (Azure DevOps, GitHub Actions)
Knowledge of IAM concepts including RBAC/ABAC least-privilege, managed/workload identity, and geo-aware risk-based access controls
Familiarity with hardened API integration layers, centralized MCP gateways, and LLM guardrails for prompt/response injection and content filtering
Proficiency in observability tools such as OpenTelemetry, Prometheus, Loki, Tempo, and Grafana for anomaly and drift detection
Understanding of data classification, training-data/model isolation, and model-theft prevention practices
Background in compliance frameworks including ISO 27001, EU AI Act, and GDPR
English proficiency at B2 level or higher

Obowiązki

Translate AI Security control descriptions into working platform configurations and defensible implementations
Engineer security controls as code using Terraform, GitOps CI/CD pipelines, and policy-as-code frameworks
Produce machine-verifiable evidence that proves adherence to control descriptions
Implement Kubernetes GPU node pool segmentation, VNet/VPC isolation, and private endpoints across Azure and GCP
Configure RBAC/ABAC least-privilege access, managed/workload identity, and risk-based access controls
Build a hardened API integration layer and centralized gateway with tool-level access controls
Deploy LLM guardrails for prompt/response injection, content filtering, kill-switches, and inference rate limits
Set up observability pipelines for anomaly and drift detection, restricted-access logs, and end-to-end traceability
Maintain training-data and model isolation to support robustness and prevent model theft
Collaborate with Senior AI Security auditors and AI Engineers to ensure implementations pass governance consistently
Support classification and compliance efforts aligned with ISO 27001, EU AI Act, and GDPR requirements

Benefity

Top tech minds driving innovation in AI, cloud and digital platform modernization
Supportive team and agile, startup-like culture
Hybrid work mode and opportunity to work remotely within Poland
Chance to work abroad for up to 60 days annually
Business-driven relocation opportunities
Career development programs
Thought leadership, mentoring, soft skills and well-being programs
Certification opportunities (Anthropic, Gemini, GCP, Azure, AWS)
English classes
Stable pay
Participation in Employee Stock Purchase Plan with 15% discount
Benefits package (health insurance, multisport, shopping vouchers)
Referral bonuses up to $2,000
Offices with entertainment and relaxation zones, table tennis, football, free snacks, coffee
Corporate, social and well-being events

Elastyczne godziny

Płatny urlop

Opieka zdrowotna

Karta sportowa

Premie

Udziały pracownicze

Darmowe przekąski

Napoje w biurze

Kursy językowe

Dofinansowanie szkoleń

Budżet konferencyjny

Spotkania integracyjne

Inne informacje

Benefits listed are available to employees only. Open for working with Contractors with terms of B2B cooperation agreed individually. EPAM will contact selected candidates exclusively. By applying, candidates agree to processing of personal data by EPAM Systems (Poland) sp. z o.o. for recruitment purposes in accordance with the Privacy Policy.

EPAM Systems

1552 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz