INFOSEC

What We Do

Keep Epic’s networks, hardware, and people safe from security risks. Install security measures and operate software to protect systems and information infrastructure, including firewalls and encryption programs. Document issues as they arise and assess & report any impact caused.

What You'll Do

InfoSec at Epic is rethinking how security gets done, replacing manual processes with automated, Al-driven systems that scale with the business. As a senior engineer reporting directly to InfoSec leadership, you will design and build the platforms that define the future of security engineering at Epic, turning hard problems into reliable, enterprise-grade solutions that teams across the company depend on.

In this role, you will

• Identify the highest-impact opportunities to automate security operations, then independently design, build, and ship the solution end to end
• Architect and deliver enterprise-scale platforms and services (detection and response pipelines, asset and software inventory, risk and exception workflows) that are adopted well beyond InfoSec
• Build and harden Al-agent workflows that take on recurring security work, with the validation, auditability, and guardrails needed to trust them in production
• Integrate security tooling, cloud platforms, and internal data sources into cohesive systems with clean APIs and clear ownership
• Challenge established ways of working, prototype quickly with emerging technologies, and turn successful experiments into durable, maintainable products
• Partner with security, platform, and engineering teams to drive adoption and raise the engineering bar through code review, mentorship, and shared standards
• Own the reliability of what you build, including observability, documentation, and a clear path for long-term support

What we're looking for

• 8+ years of professional software engineering experience, including building and operating distributed systems or platforms at enterprise scale
• Strong proficiency in one or more modern languages such as Python, Go, TypeScript, or C#, with a track record of shipping production-quality code preferred
• Hands-on experience with cloud infrastructure (AWS and/or GCP), containers and Kubernetes, infrastructure-as-code, and CI/CD
• Experience building automation, internal tools, or data pipelines that measurably reduced manual effort or improved operational outcomes
• Working knowledge of security fundamentals and operations (identity, vulnerability management, logging and detection, incident response); security automation or SOAR experience is a plus
• Practical experience building with LLMs and Al agents, or a demonstrated drive to learn quickly and apply them responsibly
• A self-directed, ownership-driven approach: you find the problem, define the solution, and see it through to delivery with minimal oversight
• Genuine curiosity and enthusiasm for emerging technology, balanced with sound engineering judgment about what is ready for production
• Excellent communication skills and the ability to build consensus and drive adoption across technical and non-technical stakeholders
• A bias for action and a history of improving how teams work, not just what they ship