Senior Security Engineer

Responsibilities

• Contribute to the design and enhancement of solutions for open-source vulnerability monitoring and security ratings
• Integrate and improve security controls in CI/CD pipelines using GitHub Actions and automation tools
• Apply DevSecOps principles and secure software development practices across the engineering lifecycle
• Collaborate with cross-functional teams to ensure stability, scalability, and compliance of delivered solutions
• Share knowledge, drive continuous improvement, and uphold secure engineering effectiveness within the team

Requirements

• Strong background in security engineering, DevSecOps orchestration, and security-as-code
• Knowledge of open-source security concepts, including Software Composition Analysis (SCA) and license compliance
• Understanding of vulnerability management processes, CVSS scoring, and remediation strategies
• Hands-on experience securing CI/CD pipelines with GitHub Actions or similar tools
• Familiarity with common security standards, secure SDLC, and open-source security frameworks
• Excellent collaboration, communication, and problem-solving skills

Preferred Qualifications

• Knowledge of OSS security monitoring platforms and compliance tools
• Experience in creating security automation scripts and workflows
• Familiarity with integrating security gates into build/test pipelines
• Background in continuous improvement practices for security, risk mitigation, and compliance auditing

Benefits

• 30 days holiday per annum
• Company Pension Scheme and Employee Stock Purchase Plan (ESPP)
• Learning and development opportunities, including professional certifications and coaching
• Flexible and remote working opportunities (hybrid model)
• Regular corporate and social events
• Discounts on fitness memberships and corporate benefits

About the Company

EPAM Systems is a global provider of digital platform engineering and software product development services. We focus on delivering scalable, secure, and efficient solutions for complex engineering challenges across various industries.