




We are looking for an accomplished Lead Security Engineer to elevate and safeguard the security framework of our AWS and GCP platforms. In this role, you will architect and deliver resilient security strategies for cloud infrastructure. You’ll have the chance to work with state\-of\-the\-art tools and partner with diverse teams to advance our security initiatives. **Responsibilities** * Apply and uphold security standards and protocols within AWS and GCP cloud environments * Oversee IAM configurations, including roles, permissions, policies, and Service Control Policies (SCPs), to maintain organization\-wide security controls * Detect, evaluate, and resolve security risks related to authentication, authorization, encryption, containers, and serverless technologies in AWS and GCP * Perform in\-depth assessments of cloud setups to uncover and correct configuration weaknesses * Build and support automation solutions and scripts (preferably in Python) for ongoing monitoring, threat identification, and incident management * Protect containerized systems like Docker, ECS, and Kubernetes, as well as serverless workloads, by implementing runtime security measures * Operate security platforms such as CSPM, runtime security, API security, SIEM, GuardDuty, and Inspector for active threat monitoring and mitigation * Advise teams on secure cloud practices, IAM management, and integrating security into DevOps workflows **Requirements** * At least 5 years of hands\-on experience in cloud security engineering or a closely related discipline * Minimum one year of experience guiding and supervising development teams * Practical expertise with AWS CloudHSM for handling hardware security modules and safeguarding cryptographic assets * Advanced DevOps capabilities for embedding security into CI/CD processes and automating cloud security operations * Solid background in Kubernetes for enforcing security within container orchestration and policy management * Strong English communication skills (B2\+ level or above) and a track record of direct interaction with clients or stakeholders **We offer** * Career plan and real growth opportunities * Unlimited access to LinkedIn learning solutions * Constant training, mentoring, online corporate courses, eLearning and more * English classes with a certified teacher * Support for employee’s initiatives (Algorithms club, toastmasters, agile club and more) * Enjoyable working environment (Gaming room, napping area, amenities, events, sport teams and more) * Flexible work schedule and dress code * Collaborate in a multicultural environment and share best practices from around the globe * Hired directly by EPAM \& 100% under payroll * Law benefits (IMSS, INFONAVIT, 25% vacation bonus) * Major medical expenses insurance: Life, Major medical expenses with dental \& visual coverage (for the employee and direct family members) * 13 % employee savings fund, capped to the law limit * Grocery coupons * 30 days December bonus * Employee Stock Purchase Plan * 12 vacations days * Official Mexican holidays, plus 5 extra holidays (Maundry Thursday and Friday, November 2nd, December 24th \& 31st) * Monthly non\-taxable amount for the electricity and internet bills EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi\-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting\-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential. *By applying to our role, you are agreeing that your personal data may be used as in set out in EPAM´s Privacy Notice and Policy.*


