Jobs / EPAM Systems

Principal Security Platform Engineer

EPAM Systems · Málaga, AN, Spain
Málaga, AN, SpainExp: 5+ yrsHybrid
Remuneration
Not specified
Location
Málaga, AN, Spain
Visa sponsorship
Not specified

Job summary

The Principal Security Platform Engineer is responsible for designing, building, and operating security controls across various environments, including cloud, network, and software supply chains. This role emphasizes automation and security best practices, utilizing technologies such as AWS, Azure, GCP, Terraform, and AI-assisted tools to enhance security measures and streamline operations.

Benefits

Private health insuranceEPAM Employees Stock Purchase Plan100% paid sick leaveReferral ProgramLanguage courses

Qualifications

  • 5+ years in security engineering, platform engineering or related cloud-focused roles
  • Hands-on experience with cloud security (AWS, Azure, GCP) and CSPM/CNAPP platforms
  • Strong understanding of networking, secure systems design and infrastructure security principles
  • Proficiency in scripts or programming with Python and/or PowerShell
  • Familiarity with Windows and Linux environments for operational security management
  • Knowledge of CI/CD security, IaC and PaC practices using Terraform or similar tools
  • Strong operational mindset with skills in monitoring, alerting and incident response
  • Comfort working with AI-driven development and security analysis tools
  • Excellent communication with ability to document and present technical solutions effectively

Responsibilities

  • Architect, implement and operate security platforms and controls ensuring high availability and measurable outcomes
  • Enhance and integrate security solutions across AWS, Azure and GCP environments
  • Continuously improve existing controls through automation, IaC/PaC, and self-service capabilities
  • Implement and manage CSPM/CNAPP solutions (e.g., Wiz) to monitor and reduce cloud risk
  • Support secure software delivery pipelines, including dependency scanning, artifact validation and secrets management
  • Develop Infrastructure as Code using Terraform, Pulumi or Ansible for automated provisioning
  • Apply Policy as Code frameworks (e.g., OPA, Sentinel) for enforcement and compliance automation
  • Build and manage observability components for threat detection, alerting and incident response
  • Collaborate with Security Operations, DevOps and engineering teams to maintain a robust security posture
  • Use AI-assisted tools to accelerate automation, security analysis and operational documentation

Skills

AnsibleAWSAzureCheckovGCPKubernetesLinuxOpen Policy AgentPowerShellPulumiPythonTerraformWindows

Certifications

Professional certification

Degrees

Bachelor’s or Master’s degree in Computer Science, Engineering or related field

Relocation

No