Security Engineering Lead

We are looking for an experienced Security Engineering Lead to take end-to-end ownership of the Security Engineering domain across a complex European IT estate. You will be accountable for security engineering services, NIS2 compliance evidence and the associated sign-off chain for the managed infrastructure. The role combines hands-on security expertise, service governance, regulatory compliance and technical leadership of distributed engineering teams. You will lead the transition of security services, govern BAU security engineering activities and work closely with the client’s CISO organisation and retained Security Operations Centre (SOC). Please note that SOC service delivery itself is not within EPAM’s scope. Responsibilities Own the Security Engineering domain across the client’s IT estate Hold accountability for NIS2 compliance within the managed infrastructure scope Maintain the required NIS2 controls, audit evidence and sign-off chain Lead security transition-in activities, including security tooling onboarding, current-state security and risk assessments, operational documentation and runbook creation, and knowledge transfer and service-readiness validation Govern offshore security engineers in Hungary and Romania across BAU security operations, security alert triage, vulnerability assessment and remediation, security reviews of infrastructure and application changes, and IAM and PAM-related activities Act as the primary security engineering interface with the client’s CISO team Collaborate with the client’s retained SOC while maintaining clear accountability boundaries, as SOC delivery is outside EPAM’s scope Manage security incidents through the agreed investigation, communication and escalation chain Ensure timely escalation of material security risks and incidents to the client Define, monitor and report security posture, vulnerability and remediation metrics Drive SOAR adoption and automated remediation initiatives Identify opportunities to improve security controls, monitoring, response processes and operational efficiency Provide security design oversight for a strategic IAM migration programme Review identity architecture, access models, security controls and migration risks Ensure that security documentation, procedures and operational controls remain accurate and audit-ready Requirements 7–10 years of professional experience in security engineering Strong hands-on experience with Privileged Access Management (PAM) Proven experience delivering IAM and PAM programmes Strong knowledge of Identity and Access Management (IAM) technologies and security principles Experience with Security Information and Event Management (SIEM) platforms Strong understanding of Security Operations Centre processes, operating models and escalation procedures Practical experience in vulnerability management, including assessment, prioritisation, remediation and reporting Strong working knowledge of NIS2 requirements and compliance controls Experience maintaining regulatory evidence and supporting security audits Previous experience working within an MSP, managed services or IT outsourcing environment Experience governing distributed or offshore security engineering teams Ability to manage security incidents and coordinate multiple technical and business stakeholders Strong risk assessment, stakeholder management and communication skills Ability to engage effectively with CISO-level stakeholders Fluent English communication skills (B2 level or higher) Nice to have CISSP, CISM or Microsoft Certified: Security Operations Analyst Associate (SC-200) certification Experience with AWS Security Hub Strong understanding of cloud security concepts Experience with CyberArk Customer Identity or other CyberArk solutions Experience with Microsoft Entra ID Experience with Microsoft 365 Defender Experience with Microsoft Defender for Cloud Experience with Datadog Experience with the Tanium Platform Knowledge of Security Orchestration, Automation and Response (SOAR) technologies Knowledge of Information Technology Infrastructure Library (ITIL) practices German or Czech language skills