Lead Cybersecurity Engineer

We are looking for a **Lead Cybersecurity Engineer** to enhance our organization's security capabilities and guide key initiatives to safeguard systems, data, and overall operations.**Responsibilities**- Design, implement, and oversee security infrastructure with emphasis on AWS and cloud-native technologies- Improve security processes and tools using Terraform, CloudFormation, and scripting in Bash or Python- Identify vulnerabilities, assess exploitation risks, and deliver actionable mitigation plans- Monitor security systems and interpret outputs to deliver actionable insights and comprehensive reports- Work closely with engineering teams to implement secure coding practices and refine development processes- Coordinate with analysts and engineers to enhance threat models, detection capabilities, and incident management systems- Implement technologies at an enterprise scale, including SIEM, vulnerability management tools, incident response platforms, HIDS/NIDS, PKI, SSO, IAM, and Privileged Access Management solutions- Optimize and expand Crowdstrike EDR tools and integrate automation workflows via SOAR platforms- Leverage effective security practices to protect containerized environments, including Kubernetes**Requirements**:- At least 5 years in cybersecurity roles with hands-on experience in AWS, scripting (Bash, Python), Terraform, and CloudFormation- Over 1 year of leadership experience in relevant roles- Proven background in SIEM, vulnerability management, incident response, HIDS/NIDS, PKI, SSO, IAM, and Privileged Access Management- Expertise in Crowdstrike or comparable EDR tools such as Carbon Black, Tanium, or OSQuery- Advanced familiarity with SOAR platforms to enable automated incident response- Proficiency in securing container platforms like Kubernetes- Understanding of cybersecurity risks, with the capability to propose and execute effective mitigations- Strong communication skills to bridge technical and organizational needs while advancing security measures**Nice to have**- Background in certifications such as CISSP, CEH, or Security+- Pentesting skills and an ability to simulate and analyze attack scenarios- Familiarity with compliance frameworks, including PCI DSS and SOX**We offer**- Career plan and real growth opportunities- Unlimited access to LinkedIn learning solutions- International Mobility Plan within 25 countries- Constant training, mentoring, online corporate courses, eLearning and more- English classes with a certified teacher- Support for employee’s initiatives (Algorithms club, toastmasters, agile club and more)- Enjoyable working environment (Gaming room, napping area, amenities, events, sport teams and more)- Flexible work schedule and dress code- Collaborate in a multicultural environment and share best practices from around the globe- Hired directly by EPAM & 100% under payroll- Law benefits (IMSS, INFONAVIT, 25% vacation bonus)- Major medical expenses insurance: Life, Major medical expenses with dental & visual coverage (for the employee and direct family members)- 13 % employee savings fund, capped to the law limit- Grocery coupons- 30 days December bonus- Employee Stock Purchase Plan- 12 vacations days plus 4 floating days- Official Mexican holidays, plus 5 extra holidays (Maundry Thursday and Friday, November 2nd, December 24th & 31st)- Monthly non-taxable amount for the electricity and internet billsEPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.