> Markdown version of [/jobs/ext/3113706-principal-security-platform-engineer](https://www.wearedevelopers.com/jobs/ext/3113706-principal-security-platform-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal Security Platform Engineer

- **Company:** EPAM Systems, Inc.
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, Microsoft Windows, Artificial Intelligence, Amazon Web Services, Microsoft Azure, Cloud Computing Security, Cyber Security, Computer Programming, Continuous Integration, DevOps, Intrusion Detection and Prevention, Intrusion Detection Systems, Python (Programming Language), Network Security, Linux System Administration, Software Tools, Ansible, Trusted Systems, Policy as Code, Pulumi, Google Cloud, System Availability, Delivery Pipeline, Firewalls (Computer Science), Infrastructure as Code (IaC), Containerization, Information Technology, Terraform
- **Published:** September 27, 2026
- **Apply:** https://www.buscojobs.com.es/principal-security-platform-engineer-en-madrid-ID-372552592

## About the Role

robust security postureUse AI-assisted tools to accelerate automation, security analysis and operational documentationRequirementsBachelor's or Master's degree in Computer Science, Engineering or related field, or equivalent experience5+ years in security engineering, platform engineering or related cloud-focused rolesHands-on experience with cloud security (AWS, Azure, GCP) and CSPM/CNAPP platformsStrong understanding of networking, secure systems design and infrastructure security principlesProficiency in scripts or programming with Python and/or PowerShellFamiliarity with Windows and Linux environments for operational security managementKnowledge of CI/CD security, IaC and PaC practices using Terraform or similar toolsStrong operational mindset with skills in monitoring, alerting and incident responseComfort working with AI-driven development and security analysis toolsExcellent communication with ability to document and present technical solutions effectivelyNice to haveDeep expertise

## Description

We're looking for a Principal Security Platform Engineer to join our team in Malaga, Spain in a hybrid working mode.In this role, you will design, build and operate security controls for cloud, network, identity, endpoint, data, and software supply chain environments, enabling advanced protection strategies across enterprise systems.The position combines technical security expertise with a DevOps-driven approach, focusing on automation, Infrastructure as Code (IaC), Policy as Code (PaC) and CI/CD security.You will leverage AI-assisted engineering tools to boost speed, efficiency, and resiliency while reducing risk in a scalable manner.ResponsibilitiesArchitect, implement and operate security platforms and controls ensuring high availability and measurable outcomesEnhance and integrate security solutions across AWS, Azure and GCP environmentsContinuously improve existing controls through automation, IaC/PaC, and self-service capabilitiesImplement and manage CSPM/CNAPP solutions (e.g., Wiz) to monitor and reduce cloud riskSupport secure software delivery pipelines, including dependency scanning, artifact validation and secrets managementDevelop Infrastructure as Code using Terraform, Pulumi or Ansible for automated provisioningApply Policy as Code frameworks (e.g., OPA, Sentinel) for enforcement and compliance automationBuild and manage observability components for threat detection, alerting and incident responseCollaborate with Security Operations, DevOps and engineering teams to maintain a robust security postureUse AI-assisted tools to accelerate automation, security analysis and operational documentationRequirementsBachelor's or Master's degree in Computer Science, Engineering or related field, or equivalent experience5+ years in security engineering, platform engineering or related cloud-focused rolesHands-on experience with cloud security (AWS, Azure, GCP) and CSPM/CNAPP platformsStrong understanding of networking, secure systems design and infrastructure security principlesProficiency in scripts or programming with Python and/or PowerShellFamiliarity with Windows and Linux environments for operational security managementKnowledge of CI/CD security, IaC and PaC practices using Terraform or similar toolsStrong operational mindset with skills in monitoring, alerting and incident responseComfort working with AI-driven development and security analysis toolsExcellent communication with ability to document and present technical solutions effectivelyNice to haveDeep expertise in Terraform, Pulumi, Ansible or OPA (Open Policy Agent) frameworksExperience implementing software supply chain security measures: SBOMs, artifact signing, dependency risk checksFamiliarity with containerization and Kubernetes security controlsKnowledge of cloud-native security services and platform tools (e.g., Wiz, Checkov)Exposure to network security technologies: IDS, IPS, DLP, EDR, firewalls and file integrity monitoringStrong Python development background with focus on automation and orchestrationExperience creating self-service security solutions for engineering enablementDemonstrated use of AI-assisted engineering tools to streamline workflows and security testingWe offerPrivate health insuranceEPAM Employees Stock Purchase Plan100% paid sick leaveReferral ProgramProfessional certificationLanguage coursesEPAM is a leading digital transformation services and product engineering company with 61,700+ EPAMers in 55+ countries and regions.Since ****, our multidisciplinary teams have been helping make the future real for our clients and communities around the world.In ****, we opened an office in Spain that quickly grew to over 1,450 EPAMers distributed between the offices in Málaga, Madrid and Cáceres as well as remotely across the country.Here you will collaborate with multinational teams, contribute to numerous innovative projects, and have an opportunity to learn and grow continuously.Why Join EPAMWORK AND LIFE BALANCE.Enjoy more of your personal time with flexible work options, 24 working days of annual leave and paid time off for numerous public holidays.CONTINUOUS LEARNING CULTURE.Craft your personal Career Development Plan to align with your learning objectives.Take advantage of internal training, mentorship, sponsored certifications and LinkedIn courses.CLEAR AND DIFFERENT CAREER PATHS.Grow in engineering or managerial direction to become a People Manager, in-depth technical specialist, Solution Architect, or Project/Delivery Manager.STRONG PROFESSIONAL COMMUNITY.Join a global EPAM community of highly skilled experts and connect with them to solve challenges, exchange ideas, share expertise and make friends.#J-*****-Ljbffr


## Related Videos

- [Why segmenting your infrastructure into tiers makes your infrastructure design better](https://www.wearedevelopers.com/videos/1960-why-segmenting-your-infrastructure-into-tiers-makes-your-infrastructure-design-better)
- [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform)
- [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Terraform for Developers](https://www.wearedevelopers.com/videos/3-terraform-for-developers)
- [#90DaysOfDevOps - The DevOps Learning Journey](https://www.wearedevelopers.com/videos/548-90daysofdevops-the-devops-learning-journey)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)