{"id":1580236,"url":"https://alion.io/job/epam-systems-poland-lead-azure-ai-security-engineer","title":"Lead Azure AI Security Engineer","company":{"id":2612641,"name":"EPAM Systems Poland","domain":"epam-poland.pl","url":"https://alion.io/company/epam-poland","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Warsaw, Poland"],"countries":["PL"],"hiring_countries":["PL"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":61000,"max_usd":107000,"period":"year","method":"role_seniority_country_cell","sample_n":10},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Active Directory","optional":false},{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"Azure","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PowerShell","optional":false},{"name":"Prompt Engineering","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":false},{"name":"Anthropic","optional":true},{"name":"AutoGen","optional":true},{"name":"AWS","optional":true},{"name":"Azure AKS","optional":true},{"name":"Bicep","optional":true},{"name":"CIS Benchmarks","optional":true},{"name":"Copilot","optional":true},{"name":"Copilot Studio","optional":true},{"name":"Crowdstrike","optional":true},{"name":"GCP","optional":true},{"name":"Gemini","optional":true},{"name":"HIPAA","optional":true},{"name":"ISO 27001","optional":true},{"name":"Lacework","optional":true},{"name":"LangChain","optional":true},{"name":"LLM","optional":true},{"name":"NIST AI RMF","optional":true},{"name":"OpenAI","optional":true},{"name":"OWASP","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"PCI DSS","optional":true},{"name":"Platform Engineering","optional":true},{"name":"Prisma Cloud","optional":true},{"name":"Semantic Kernel","optional":true},{"name":"Terraform","optional":true},{"name":"Wiz","optional":true}],"status":"live","first_seen_at":"2026-10-01T12:00:31Z","employer_posted_date":null,"last_verified_at":"2026-10-01T12:00:31Z","board_verified":false,"closed_at":null,"days_open":24,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":24},"description":"We are seeking a Lead Azure AI Security Engineer to provide technical leadership and subject matter expertise in securing Azure and Microsoft cloud environments at enterprise scale. In this role you will design and improve security architecture while leveraging AI-powered tools to automate and enhance daily security engineering activities across hybrid and multi-cloud environments.\nResponsibilities\nProvide technical leadership and subject matter expertise in securing Azure and Microsoft cloud environments at enterprise scale\nDesign, implement and improve security architecture across Azure, Microsoft 365, Microsoft Entra ID, hybrid and multi-cloud environments, with Azure as the primary cloud platform\nWork across key cloud security domains including CSPM/CNAPP, Identity and Access Management, Privileged Access Management, Data Protection and Data Loss Prevention, Microsoft Defender security stack, SIEM/SOAR, Business Continuity and Disaster Recovery, DevSecOps, container and Kubernetes security and policy-as-code\nPlan, design and implement security controls for cloud workloads, applications, infrastructure and data\nCollaboration with engineering, infrastructure, development, DevOps, database, operations and compliance teams to embed security into the full delivery lifecycle\nSupport implementation and continuous improvement of Zero Trust architecture, secure authentication, conditional access, least privilege and identity protection\nDevelop and maintain automation scripts, workflows and security tooling using PowerShell, Python, Azure CLI, Logic Apps, Azure Functions, KQL and REST APIs\nUse AI-powered tools and agentic workflows to automate and improve security activities such as findings triage, log analysis, incident investigation support, configuration review, compliance evidence collection and vulnerability analysis\nDesign or integrate AI agents and AI-assisted automations using modern AI platforms and frameworks while ensuring proper security, privacy and governance controls\nContribute to secure adoption of AI technologies by defining guardrails for data protection, access control, prompt security, model usage, auditability and human-in-the-loop processes\nTrain and support other team members on cloud security practices, security processes and AI-assisted automation approaches\nRequirements\n3+ years of experience in software development\nBachelor's degree in Computer Science, Information Security, Engineering or equivalent practical experience\nHands-on experience with Microsoft Azure services\nStrong understanding of cloud security concepts, Azure architecture and enterprise-scale cloud environments\nPractical experience with Microsoft Entra ID/Azure Active Directory, Microsoft Defender for Cloud and Microsoft Defender XDR\nSkills in Microsoft Sentinel, Microsoft Purview and Microsoft Intune\nProficiency in Conditional Access, Identity Protection and Privileged Identity Management\nCompetency in Key Vault, Azure Policy and Azure Monitor/Log Analytics\nStrong engineering background including experience with Active Directory, Microsoft Entra ID, Microsoft 365, Exchange Online and hybrid identity\nSecurity engineering experience in at least one business or technology domain along with participation in at least several production projects\nUnderstanding of software development lifecycle, DevOps/DevSecOps practices, cloud security assessment methodologies and secure-by-design principles\nAbility to work closely with developers, business analysts, QA engineers, architects, project managers, infrastructure and operations teams and to follow, maintain and improve defined security processes\nPractical understanding of AI-assisted productivity and automation including building or configuring AI agents, integrating LLMs with tools, APIs and workflows, prompt engineering and using AI tools securely with awareness of sensitive data handling\nGood communication skills and ability to explain security risks, technical decisions and remediation plans to both technical and non-technical stakeholders\nNice to have\nSkills in scripting and automation using PowerShell, Python, Bash, Azure CLI, Terraform or Bicep\nFamiliarity with SIEM/SOAR platforms, especially Microsoft Sentinel, KQL and Logic Apps\nExperience with CNAPP/CSPM/CWPP/CIEM tools such as Prisma Cloud, Wiz and Orca or Lacework, Check Point CloudGuard and CrowdStrike or Tenable and Rapid7\nUnderstanding of compliance frameworks such as ISO 27001, NIST and CIS Benchmarks or PCI DSS, HIPAA and HITRUST\nKnowledge of container and Kubernetes security including AKS, container registries and image scanning\nFamiliarity with AI/LLM platforms such as Azure OpenAI, Azure AI Foundry and Microsoft Copilot Studio or Semantic Kernel, LangChain and AutoGen\nUnderstanding of AI security risks including data leakage, prompt injection, excessive agency and AI supply chain risks\nExperience implementing AI governance and secure AI usage policies aligned with frameworks such as NIST AI RMF, OWASP Top 10 for LLM Applications or ISO/IEC 42001\nAZ-500, SC-100, SC-200\nSC-300, SC-400, AZ-104\nAZ-305, CISSP, CISM\nCISA, CCSK, CCSP, SSCP\nAI-900, AI-102, PL-900/PL-200\nWe offer\nWe gather like-minded people:\nTop tech minds driving innovation in AI, cloud and digital platform modernization\nSupportive team and agile, startup-like culture\nHybrid by design mode and opportunity to work remotely within Poland\nChance to work abroad for up to 60 days annually\nBusiness-driven relocation opportunities\n\nWe provide growth opportunities:\nCareer development programs\nThought leadership, mentoring, soft skills and well-being programs\nCertification (Anthropic, Gemini, GCP, Azure, AWS)\nEnglish classes\n\nWe cover it all:\nStable pay\nParticipation in the Employee Stock Purchase Plan with a 15% discount\nBenefits package (health insurance, multisport, shopping vouchers)\nReferral bonuses up to $2,000\nOffices featuring entertainment and relaxation zones, table tennis and football, free snacks, coffee and more\nCorporate, social and well-being events\n\nPlease, note:\nBenefits listed above are available to employees only\nWe are open for working with Contractors. Terms of B2B cooperation agreements are agreed individually\nWe will reach out to selected candidates exclusively\n\nEPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.","description_format":"text","description_chars":6604,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Growth opportunities","Health insurance"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-01T12:45:04Z"}],"visa":[],"liveness":{"score":22,"band":"cold","label":"Long shot","p_open":0.85,"p_active":0.747,"p_room":0.35,"age_days":24,"expected_fill_days":12,"reasons":["seen:24","velocity","win:tail","comp:brand"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/epam-systems-poland-lead-azure-ai-security-engineer","json_url":"https://alion.io/job/epam-systems-poland-lead-azure-ai-security-engineer.json","meta":{"generated_at":"2026-10-26T07:21:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9839,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2612641},"rest":"https://alion.io/mcp/rest/get_company?id=2612641"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fepam-systems-poland-lead-azure-ai-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fepam-systems-poland-lead-azure-ai-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fepam-systems-poland-lead-azure-ai-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/epam-systems-poland-lead-azure-ai-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fepam-systems-poland-lead-azure-ai-security-engineer"}]}