Senior Security Engineer

We are looking for a talented Senior Security Engineer experienced in Cyber/Information/Network/Cloud Security in enterprise environments, with basic knowledge of threat analysis of event data from commercial and open-source infrastructure technology platforms.Shift rotation is 2 days on, 2 days off, 12 hours, with 11 work hours and 1 hour for rest.Experience the freedom of remote work from anywhere in Georgia, whether from the comfort of your home, our modern offices in Tbilisi and Batumi or a coworking space in Kutaisi.ResponsibilitiesMonitor on-prem and AWS infrastructure for attacks, intrusions and unusual, unauthorized or illegal activityOversee identity and access management, including monitoring for abuse of permissions by authorized system usersCreate SIEM and SOAR detection and remediation scenarios, and implement them as rulesBuild, test and update playbooksPerform threat hunting and support threat intelligence processesExecute other security operations activities alongside security monitoringGenerate reports for both technical and non-technical staff and stakeholdersLeverage advanced analytic tools to determine emerging threat patterns and vulnerabilitiesRequirements3+ years of experience as a Security Analyst or Security Engineer in enterprise environmentsKnowledge of Internet security, networking protocols and related technologies, including IDS/IPS, firewalls and content filteringFamiliarity with Network Behavior Analysis tools, anti-malware and packet inspectionUnderstanding of Windows, Linux, DB and network device monitoring and logging techniquesBackground in host and network security hardening, common intrusion techniques and risk management conceptsBasic knowledge of malware detection, intrusion detection and prevention systemsHands-on experience with at least one SIEM solution (Splunk, QRadar, ArcSight, LogRhythm, ELK or Wazuh)Proficiency in at least one SIRP/SOAR tool (TheHive, Cortex, Phantom, XSOAR or Resilient)Capability to work with the following toolset: Splunk ES, CrowdStrike Falcon, WIZ, AWS GuardDuty, Palo Alto XSOAR, ProofpointExcellent command of written and spoken English (B2+ level)Nice to haveExperience with AWSBackground in network securityFamiliarity with firewalls such as F5, Juniper and Check PointExposure to Palo Alto and Cisco firewallsWe offerWe connect like-minded peopleDelivering innovative solutions to industry leaders, making a global impactEnjoyable working environment, whether it is the vibrant office or the comfort of your own homeOpportunity to work abroad for up to two months per yearRelocation opportunities within our offices in 55+ countriesCorporate and social eventsWe invest in your growthLeadership development, career advising, soft skills and well-being programsCertifications, including GCP, Azure and AWSUnlimited access to EPAM's internal learning databaseFree English classes with certified teachersWe cover it allParticipation in the Employee Stock Purchase PlanMonetary bonuses for engaging in the referral programComprehensive medical & family care packageFive trust days per year (sick leave without a medical certificate)Benefits package (sports activities, a variety of stores and services)EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.