Cyber Security Architect

About the Position

We are looking for an experienced Cyber Security Architect to lead security architecture initiatives across enterprise applications, AI-enabled solutions, and cloud platforms. The role will focus on application security, AI security, secure software development lifecycle (SSDLC), compliance, and cyber risk management for modern cloud-native and hybrid environments. The ideal candidate will have strong expertise in securing applications built on AWS and Microsoft Azure, as well as experience addressing emerging security risks associated with AI/ML platforms, LLM integrations, and data protection. This role requires close collaboration with engineering, DevOps, data science, infrastructure, and governance teams to ensure security is embedded throughout the delivery lifecycle.

Responsibilities

• Design and maintain secure architecture patterns for cloud-native and enterprise applications
• Definition and enforcement of application security standards, best practices, and secure coding guidelines for Java, Python, and .NET applications
• Performance of security architecture reviews, threat modeling, and risk assessments for new and existing systems
• Support for secure API design, authentication, authorization, encryption, and secrets management strategies
• Collaboration with development and DevOps teams to integrate security controls into CI/CD pipelines and SDLC processes
• Evaluation and recommendation of security tools and technologies including SAST, DAST, SCA, container security, and cloud security solutions
• Implementation of security controls for AI/ML and Generative AI solutions
• Assessment of security risks related to Large Language Models, AI APIs, model integrations, and AI data pipelines
• Mitigation of AI-related risks such as prompt injection, data leakage, model poisoning, insecure output handling, and unauthorized model access
• Development and governance of security architectures for AWS and Microsoft Azure environments, ensuring secure configuration across cloud services, networking, IAM, storage, and compute resources
• Support for Zero Trust principles, least-privilege access, and identity federation
• Conduct cyber risk assessments and provide recommendations for mitigation strategies

Requirements

• Minimum 7 years of experience in cyber security architecture across enterprise applications, cloud platforms, and AI-enabled solutions
• Expertise in securing applications built on AWS and Microsoft Azure
• Proficiency in Java, Python, and .NET application security
• Skills in security architecture reviews, threat modeling, and risk assessments
• Knowledge of secure API design, authentication, authorization, and secrets management
• Familiarity with SAST, DAST, and SCA tools alongside container security and cloud security solutions
• Background in AI/ML and Generative AI security including LLMs, AI APIs, and AI data pipelines
• Understanding of Zero Trust principles, least-privilege access, and identity federation
• Competency in compliance frameworks such as ISO 27001, SOC 2, and NIST
• Qualifications in CIS, GDPR, and PCI-DSS regulatory requirements
• Capability to develop security policies, standards, procedures, and technical documentation
• Skills in cyber risk assessment, incident analysis, and root cause investigation
• English proficiency at B2 level or higher

We Offer

• Opportunity to work remotely from Poland
• Engaging role in a leading tech company, EPAM Systems

About the Company

EPAM Systems is a global software engineering and product development company that partners with the world's leading businesses to deliver digital transformation and technology innovation.