Cloud Security Architect + AI

Brak informacji o wynagrodzeniu

MidHybrydaFull-time

#474112·Dodano 10 dni temu·3

Źródło: EPAM Systems

Aplikuj teraz

Tech Stack / Keywords

Azure AWS GCPCSPMIAMTerraform PythonPowerShellKubernetesCNAPP

Podsumowanie oferty

Shape secure cloud architectures and security standards across cloud, hybrid and on-premises environments. Use AI-assisted automation to improve cloud security activities, including risk assessment, vulnerability analysis and workflow automation.

Wymagania

Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience.
5+ years of information security experience, with a focus on security architecture and design.
Experience delivering or significantly contributing to cloud security architecture, implementation or modernization projects.
Strong hands-on expertise with at least one major cloud platform (Azure, AWS or GCP) and its native security services and controls.
Strong understanding of cloud security architecture, including IAM, network segmentation, encryption, key management, workload protection, logging and monitoring.
Practical experience with CSPM, cloud security assessments, configuration reviews and risk remediation.
Experience with cloud security tools such as Microsoft Defender for Cloud, AWS Security Hub, Google Security Command Center, Wiz, Prisma Cloud or similar.
Working knowledge of related security domains, including IAM, network security, application security, data protection and security operations; understanding of security architecture principles and frameworks such as Zero Trust, NIST, ISO 27001 or CIS Benchmarks.
Familiarity with Infrastructure as Code, scripting and cloud security automation.
Intermediate practical experience with AI-assisted tools and automation, including using AI tools for security analysis, troubleshooting and technical research; applying structured prompting for technical tasks; generating and validating scripts, queries and security documentation with AI; using AI to simplify repetitive security workflows; and basic experience configuring AI-assisted workflows or integrations.
Understanding of safe AI usage, including data protection, access control and validation of AI-generated outputs, and willingness to further develop AI automation skills.
Strong communication and collaboration skills.
Hands-on technical proficiency is a must.

Nice to have:

Experience with multiple cloud platforms, hybrid or multi-cloud security architectures.
Experience with CNAPP, CWPP, CIEM, cloud governance and policy-as-code solutions.
Experience with Terraform, CloudFormation, Bicep, Python, PowerShell or similar automation technologies.
Experience with Kubernetes, container security, DevSecOps or CI/CD security.
Experience integrating cloud security solutions with SIEM/SOAR platforms.
Experience with AI automation, AI agents, Microsoft Copilot Studio, Azure OpenAI, Amazon Bedrock, Power Automate or similar tools.
Understanding of AI security risks, including prompt injection, data leakage and insecure tool usage.
Security or cloud certifications such as CISSP, CISM, CCSP, CCSK, SC-100, AZ-500, AWS Security Specialty, Google Professional Cloud Security Engineer or similar.
AI-related certifications such as AI-900, Claude Certified Architect or AWS Certified AI Practitioner are a plus.

Obowiązki

Design and implement security architectures and controls across cloud, hybrid and on-premises environments, with a primary focus on cloud security.
Gather business, technical and compliance requirements to design secure cloud solutions for new implementations, migrations and security improvements.
Define and improve cloud security capabilities, including IAM, network security, data protection, workload security, logging, monitoring and governance; design and improve CSPM capabilities for misconfiguration detection, compliance monitoring, risk prioritization and remediation.
Conduct security architecture reviews, threat modeling and risk assessments for cloud infrastructure, applications and integrations.
Develop cloud security reference architectures, security standards, configuration baselines and secure design patterns.
Evaluate cloud security technologies, including CSPM, CNAPP, cloud-native security services and security automation solutions.
Collaborate with cloud engineering, infrastructure, development, security operations, IAM, AppSec and compliance teams to integrate security into cloud solutions.
Support security automation using Terraform, PowerShell, Python, REST APIs or similar technologies.
Use AI-assisted tools and workflows to improve cloud security activities, including cloud configuration and vulnerability analysis, security risk assessment and remediation recommendations, security policy and compliance analysis, security scripting, reporting and documentation, and repetitive task and workflow automation.
Identify opportunities for AI-assisted security automation while ensuring appropriate validation, data protection and human oversight; communicate security risks, architectural decisions and remediation plans to stakeholders and security leadership.

Benefity

Certification opportunities (Anthropic, Gemini, GCP, Azure, AWS).
Career development programs, mentoring, soft skills and well-being programs.
English classes.
Participation in the Employee Stock Purchase Plan with a 15% discount.
Benefits package including health insurance, Multisport and shopping vouchers.
Referral bonuses up to $2,000.
Offices with entertainment and relaxation zones, table tennis and football, free snacks and coffee.
Corporate, social and well-being events.
Business-driven relocation opportunities.

Pakiet relokacyjny

Kursy językowe

Udziały pracownicze

Ubezpieczenie

Karta sportowa

Premie

Darmowe przekąski

Napoje w biurze

Spotkania integracyjne

Inne informacje

Remote work is available within Poland; the role is hybrid by design.
Opportunity to work abroad for up to 60 days annually.

EPAM Systems

1770 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz