Note: The job is a remote job and is open to candidates in USA. EPAM Systems is a technology services company delivering solutions for clients through global teams. The Senior Security Engineer will independently support client security initiatives, focusing on application and cloud security, vulnerability management, CI/CD security automation, alert triage, and remediation. The role also involves collaborating across technical and compliance teams, improving security processes, and applying AI/LLM tooling to strengthen detection and response capabilities.
Responsibilities
- Support vulnerability management for applications and microservices
- Provide guidance on secure authentication, authorization, secrets management, and data security
- Evaluate, enhance, and recommend the implementation of application security automation within CI/CD pipelines to detect and remediate security issues early
- Monitor, analyze, and triage alerts and logs from various security platforms, such as Security Scorecard and other third-party monitoring services
- Triage, remediate, and escalate security alerts, events, and reports
- Stay current on emerging threats, vulnerabilities, and threat actor behaviors, applying this knowledge to improve detection and response
- Support the response to and remediation of vulnerabilities identified through the penetration testing program
- Collaborate with Engineering, IT, Infrastructure, and Compliance teams to implement security controls aligned with frameworks such as NIST, HITRUST, and CIS
- Maintain production security procedures and metrics
- Develop and research enhanced security training
- Work independently to ensure goals set by leadership are achieved, while collaborating effectively as part of a team
- Drive continuous improvement by identifying automation opportunities, integrating emerging best practices, and strengthening detection and response capabilities
- Evaluate and apply AI/LLM based tooling to accelerate triage, deduplicate and correlate findings across scanners, prioritize based on exploitability and business context, and draft remediation guidance while maintaining human review of results
Skills
- A minimum of 3 years of relevant experience
- Experience in application security or similar security roles
- Expertise in cloud environments
- Familiarity with software development lifecycle (SDLC) processes and source control technologies
- Experience with supply chain security, including dependency management and SBOMs
- Exposure to container and CI/CD security, such as Kubernetes and GitHub Actions
- Exposure to offensive security expertise and penetration testing certifications, such as OSWE or OSCP+, considered highly desirable
- Comfortable writing detection queries and scripts
- Familiarity with regulatory frameworks such as SOC 2 and CIS
- Knowledge of common attack vectors and the MITRE ATT&CK framework
- Strong problem-solving skills and the ability to thrive in a fast-paced, collaborative environment
- Experience with AWS, GCP, or CDN/edge security tools and services considered a plus
- Experience with automation frameworks or scripting in PowerShell or Bash
- Security certifications such as Security+, CEH, or similar
- Excellent English proficiency (B2 level or higher)
- Experience working with or reporting to a CISO
- Development experience in a modern programming language, such as Python or Go
- Familiarity with the HITRUST framework
- Experience with SSO platforms, such as Okta and SAML
Benefits
- International projects with top brands
- Work with global teams of highly skilled, diverse peers
- Healthcare benefits
- Employee financial programs
- Paid time off and sick leave
- Upskilling, reskilling and certification courses
- Unlimited access to the LinkedIn Learning library and 22,000+ courses
- Global career opportunities
- Volunteer and community involvement opportunities
- EPAM Employee Groups
- Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn
Company Overview
Company H1B Sponsorship