Senior Cloud Security Engineer

We are seeking a Senior Cloud Security Engineer to ensure the secure operations of our cloud infrastructure, platforms, and software, including the installation, maintenance, and improvement of cloud computing environments and monitoring solutions. This role also involves developing new designs and security strategies across cloud-based applications, spanning both infrastructure and platform layers. Feel free to work remotely from anywhere across Latvia or connect with colleagues at our Riga office. Responsibilities Review existing Kubernetes environments, workloads, and security configurationsIdentify Kubernetes security risks, misconfigurations, and gaps against industry best practicesCollaborate with the Platform team to embed security controls into Kubernetes deployment workflowsApply Helm knowledge to review and secure Kubernetes package management, including Helm charts, values files, release configurations, and deployment templatesDesign, configure, and deploy Falco on Kubernetes environments, customizing rules to detect suspicious activity, policy violations, and runtime threatsConfigure Falco outputs and integrations with existing logging, monitoring, SIEM, or alerting platformsDefine alert severity levels, escalation paths, and response guidance for Falco-generated alertsValidate Falco detections through testing and controlled simulation of relevant security eventsMaintain Falco configuration, rules, and deployment documentation, and support the creation of playbooks and runbooks for common Kubernetes security eventsAssist with triage and investigation of Kubernetes runtime security alerts where requiredProduce clear technical documentation covering Falco configuration, alerting logic, operational procedures, and Kubernetes security recommendationsDeliver knowledge-sharing sessions to the Cloud Security team and relevant Platform team members, explaining Falco concepts, Kubernetes runtime security principles, and alert investigation approaches Requirements 3+ years of experience in technical IT or security rolesBackground in securing Kubernetes deploymentsFamiliarity with SIEM tools such as Splunk, Rapid7, ELK, QRadar, etc.Comprehensive knowledge of standard security products and technologiesUnderstanding of Linux operating systems and hands-on system administration experienceProficiency in command line interfaces and scripting, especially Lambda, Python, Bash, or PowerShellCapability to triage, investigate, analyse, and contain information security eventsStrong analytical and problem-solving skills, with the ability to assimilate and correlate large amounts of data from various networks, operating systems, applications, security devices, logs, and alertsConfident, driven, and dynamic professional with a results-oriented mindsetSelf-motivated, enthusiastic, and collaborative team player with strong co-working skillsConflict resolution skills and the ability to build trustworthy relationships with internal and external stakeholdersEmpathy, communication, and the ability to provide constructive feedbackProficiency in English at an Upper-Intermediate level (B2) or higher Nice to have Experience with security services in the AWS environmentUnderstanding of incident response and digital forensic techniquesHands-on experience with centrally managed information security tools such as Anti-Virus, EDR, SIEM, or SOARSkills in Infrastructure as Code using Terraform, along with a DevSecOps mindsetCertifications such as Certified Kubernetes Security Specialist, Certified Kubernetes Administrator, AWS Security, AWS Solutions Architect, AWS DevOps Engineer, or CompTIA Security+ or equivalent We offer Engineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years.Advanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies.World-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact.Professional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices.GenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys.Entrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life.Hybrid Setup: The flexibility to work from any location in Latvia, whether it's your home or our office in Riga.Other Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more. Salary range €3.2K-€5K gross, based on your experience and interview results. EPAM is a leading global provider of digital platform engineering and development services. For over 30 years, our team has helped leading brands navigate the waves of digital transformation, building solutions that help them stay competitive through constant market disruption.With offices in 55+ countries, EPAM has grown in Latvia to over 150+ talented innovators in 4 years. We foster creativity and unconventional ways of doing things, welcoming like-minded professionals to join us.