Senior Cloud Security Specialist

We are looking for a highly skilled and motivated Senior Cloud Security Specialist to join our team, where you will play a pivotal role in strengthening our cloud security infrastructure. This position focuses on managing and optimizing Web Application Firewall (WAF) configurations, analyzing traffic logs, and collaborating with cross-functional teams to ensure robust cloud security measures across all business-critical websites and domains. ResponsibilitiesDeploy and audit baseline WAF rules across all in-scope websites and domains using internal toolingReview WAF logs in Cloudflare to identify legitimate traffic and assess rule impactTransition WAF rules from log mode to block mode following thorough analysis and stakeholder approvalApply and manage exceptions to WAF rules, ensuring minimal impact on security postureRaise and manage ServiceNow change requests for rule updates and deploymentsMaintain and update weekly progress reports and tracker spreadsheets for leadership visibilityCollaborate with internal stakeholders including website owners, InfoSec, and platform teamsUse GitHub-hosted tools and scripts to automate and streamline rule deployment and reporting RequirementsBachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field3+ years of experience in managing cloud security infrastructureStrong understanding of Cloudflare WAF, including Managed Rulesets, OWASP Core Ruleset, and WAF Attack ScoreProficiency in Linux command line, bash scripting, and tools like jq for JSON parsingExperience with log analysis and identifying false positives in HTTP event logsFamiliarity with Cloudflare dashboard and filtering techniques (IP, ASN, request paths)Working knowledge of GitHub for accessing and managing internal toolsExcellent command of written and spoken English (B2+ level) Nice to haveBackground in Information Security, DevSecOps, or Security OperationsFamiliarity with networking concepts (e.g., IP addresses, ASNs) We offerWe connect like-minded people: Delivering innovative solutions to industry leaders, making a global impactEnjoyable working environment, whether it is the vibrant office or the comfort of your own homeOpportunity to work abroad for up to two months per yearRelocation opportunities within our offices in 55+ countriesCorporate and social eventsWe invest in your growth:  Leadership development, career advising, soft skills and well-being programsCertifications, including GCP, Azure and AWSUnlimited access to LinkedIn Learning and Get AbstractFree English classes with certified teachersDiscounts in local language schools, including online courses for the Kazakh languageWe cover it all: Participation in the Employee Stock Purchase PlanMonetary bonuses for engaging in the referral programMedical & family care packageSix trust days per year (sick leave without a medical certificate)Coverage of psychology sessions of your choiceBenefits package (sports activities, a variety of stores and services) Immerse yourself in our collaborative culture by working on-site at our office in Astana, Almaty or Karaganda. Unlock the potential of remote work in Kazakhstan, giving you the flexibility to work from home or access our offices in Astana, Almaty or Karaganda. EPAM is a team of technologists and innovators united by a passion for technology. In Kazakhstan, we operate across all cities with offices in Astana, Almaty, and Karaganda and work with the world's leading companies from different industries. In 2023, EPAM received the Export Excellence Award at the esteemed Digital Bridge Awards, showcasing our commitment to excellence and innovation.