Senior Platform Security Engineer
⚲ Warsaw
Do uzgodnienia
Wymagania
- Packer
- CIS Benchmarks
- Platform Security
- AWS
- Jenkins
- Windows Administration
- Terraform
- Chef Infra
Opis stanowiska
We are seeking a Senior Platform Security Engineer to automate the hardening of golden images for Level 1 CIS benchmarks and strengthen platform security across cloud and on-premises environments.
Responsibilities
• Automate the hardening of golden images to meet Level 1 CIS benchmark requirements
• Build and maintain infrastructure as code pipelines using Jenkins, Terraform and Chef
• Configure Windows Group Policy Objects for Windows Server 2019, 2022 and 2025 operating systems
• Develop and manage AWS-based infrastructure to support secure image creation
• Create and maintain Packer and Vagrant templates for golden image builds
• Apply Level 1 CIS benchmark standards across all supported platforms
• Collaborate with cross-functional teams to integrate security automation into existing workflows
• Troubleshoot and resolve issues within the automation and hardening pipeline
• Document processes and configurations related to image hardening and compliance
Requirements
• 5+ years of experience in platform security engineering or a related field
• Knowledge of Level 1 CIS benchmarks
• Proficiency in Jenkins, Terraform and Chef Infra
• Expertise in Amazon Web Services
• Skills in Windows Administration including Group Policy Objects for Windows Server 2019, 2022 and 2025
• English proficiency at B2 level or higher
Nice to have
• Familiarity with HashiCorp Vagrant and Packer
• Knowledge of Wiz CSPM
We offer
• We gather like-minded people:Engineering community of industry professionals
• Friendly team and enjoyable working environment
• Flexible schedule and opportunity to work remotely within Poland
• Chance to work abroad for up to 60 days annually
• Business-driven relocation opportunities
• We provide growth opportunities:Outstanding career roadmap
• Leadership development, career advising, soft skills, and well-being programs
• Certification (GCP, Azure, AWS)
• Unlimited access to LinkedIn Learning, Get Abstract, Cloud Guru
• English classes
• We cover it all:Stable income (Employment Contract or B2B)
• Participation in the Employee Stock Purchase Plan
• Benefits package (health insurance, multisport, shopping vouchers)
• Strategically located offices featuring entertainment and relaxation zones, table tennis and football, free snacks, fantastic coffee, and more
• Referral bonuses
• Corporate, social and well-being events
• Please, note:The set of bonuses might vary based on the role you apply for – specifics will be discussed with our recruiter during the general interview.
• We will reach out to selected candidates exclusively.
EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.
Responsibilities
• Automate the hardening of golden images to meet Level 1 CIS benchmark requirements
• Build and maintain infrastructure as code pipelines using Jenkins, Terraform and Chef
• Configure Windows Group Policy Objects for Windows Server 2019, 2022 and 2025 operating systems
• Develop and manage AWS-based infrastructure to support secure image creation
• Create and maintain Packer and Vagrant templates for golden image builds
• Apply Level 1 CIS benchmark standards across all supported platforms
• Collaborate with cross-functional teams to integrate security automation into existing workflows
• Troubleshoot and resolve issues within the automation and hardening pipeline
• Document processes and configurations related to image hardening and compliance
Requirements
• 5+ years of experience in platform security engineering or a related field
• Knowledge of Level 1 CIS benchmarks
• Proficiency in Jenkins, Terraform and Chef Infra
• Expertise in Amazon Web Services
• Skills in Windows Administration including Group Policy Objects for Windows Server 2019, 2022 and 2025
• English proficiency at B2 level or higher
Nice to have
• Familiarity with HashiCorp Vagrant and Packer
• Knowledge of Wiz CSPM
We offer
• We gather like-minded people:Engineering community of industry professionals
• Friendly team and enjoyable working environment
• Flexible schedule and opportunity to work remotely within Poland
• Chance to work abroad for up to 60 days annually
• Business-driven relocation opportunities
• We provide growth opportunities:Outstanding career roadmap
• Leadership development, career advising, soft skills, and well-being programs
• Certification (GCP, Azure, AWS)
• Unlimited access to LinkedIn Learning, Get Abstract, Cloud Guru
• English classes
• We cover it all:Stable income (Employment Contract or B2B)
• Participation in the Employee Stock Purchase Plan
• Benefits package (health insurance, multisport, shopping vouchers)
• Strategically located offices featuring entertainment and relaxation zones, table tennis and football, free snacks, fantastic coffee, and more
• Referral bonuses
• Corporate, social and well-being events
• Please, note:The set of bonuses might vary based on the role you apply for – specifics will be discussed with our recruiter during the general interview.
• We will reach out to selected candidates exclusively.
EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.
🔍 Dekoder Ogłoszenia
🟡
Automate the hardening of golden images to meet Level 1 CIS benchmark requirements
Oznacza to, że będziesz musiał zautomatyzować proces tworzenia standardowych, bezpiecznych obrazów systemów operacyjnych zgodnie z określonymi standardami bezpieczeństwa.
🟡
Build and maintain infrastructure as code pipelines using Jenkins, Terraform and Chef
Oczekuje się od Ciebie tworzenia i zarządzania potokami automatyzacji infrastruktury przy użyciu wymienionych narzędzi, co wymaga biegłości w tych technologiach.
🟡
Configure Windows Group Policy Objects for Windows Server 2019, 2022 and 2025 operating systems
Wymaga to dogłębnej znajomości zarządzania politykami grup w systemach Windows Server, w tym w najnowszych wersjach.
🟡
Develop and manage AWS-based infrastructure to support secure image creation
Będziesz odpowiedzialny za budowanie i utrzymanie infrastruktury w chmurze AWS, która jest kluczowa dla procesu tworzenia bezpiecznych obrazów.
🔴
We gather like-minded people:Engineering community of industry prof
To ogólnikowe stwierdzenie sugeruje nacisk na współpracę i rozwój w ramach społeczności inżynierskiej, ale nie precyzuje konkretnych benefitów.