Senior Cloud Security Engineer (EPAM SISTEMOS, UAB)

Job description:
We are seeking a Senior Cloud Security Engineer to ensure the secure operations of our cloud infrastructure, platforms, and software, including the installation, maintenance, and improvement of cloud computing environments and monitoring solutions. This role also involves developing new designs and security strategies across cloud-based applications, spanning both infrastructure and platform layers.
_This position offers hybrid setup with the flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas._
Review existing Kubernetes environments, workloads, and security configurations
Identify Kubernetes security risks, misconfigurations, and gaps against industry best practices
Collaborate with the Platform team to embed security controls into Kubernetes deployment workflows
Apply Helm knowledge to review and secure Kubernetes package management, including Helm charts, values files, release configurations, and deployment templates
Design, configure, and deploy Falco on Kubernetes environments, customizing rules to detect suspicious activity, policy violations, and runtime threats
Configure Falco outputs and integrations with existing logging, monitoring, SIEM, or alerting platforms
Define alert severity levels, escalation paths, and response guidance for Falco-generated alerts
Validate Falco detections through testing and controlled simulation of relevant security events
Maintain Falco configuration, rules, and deployment documentation, and support the creation of playbooks and runbooks for common Kubernetes security events
Assist with triage and investigation of Kubernetes runtime security alerts where required
Produce clear technical documentation covering Falco configuration, alerting logic, operational procedures, and Kubernetes security recommendations
Deliver knowledge-sharing sessions to the Cloud Security team and relevant Platform team members, explaining Falco concepts, Kubernetes runtime security principles, and alert investigation approaches
Requirements:
3+ years of experience in technical IT or security roles
Background in securing Kubernetes deployments
Familiarity with SIEM tools such as Splunk, Rapid7, ELK, QRadar, etc.
Comprehensive knowledge of standard security products and technologies
Understanding of Linux operating systems and hands-on system administration experience
Proficiency in command line interfaces and scripting, especially Lambda, Python, Bash, or PowerShell
Capability to triage, investigate, analyse, and contain information security events
Strong analytical and problem-solving skills, with the ability to assimilate and correlate large amounts of data from various networks, operating systems, applications, security devices, logs, and alerts
Confident, driven, and dynamic professional with a results-oriented mindset
Self-motivated, enthusiastic, and collaborative team player with strong co-working skills
Conflict resolution skills and the…