Senior Security Engineer
We are looking for a Senior Security Engineer to join a team building security solutions that help organizations monitor, assess and improve the security posture of open-source software. The work focuses on a platform for unified visibility into open-source vulnerabilities and a solution that provides security ratings for open-source libraries, enabling better risk-based decisions across development teams.
Responsibilities
- Contribute to the development and enhancement of solutions for open-source vulnerability monitoring and security rating
- Support and improve CI/CD pipelines and GitHub Actions–based workflows
- Apply DevSecOps and secure engineering practices throughout the software lifecycle
- Collaborate closely with cross-functional teams to deliver scalable, reliable and secure solutions
- Share knowledge and support overall product quality as a team player
Requirements
- 3+ years of experience in security engineering with expertise in DevSecOps orchestration, Secure Software Development Life Cycle and security-as-code
- Knowledge of open-source security including Software Composition Analysis and OSS license compliance
- Understanding of CVSS scoring, exploitability analysis and vulnerability remediation strategies
- Hands-on experience securing GitHub Actions workflows and integrating security gates into CI/CD pipelines
- Familiarity with security guidelines and standards
- Strong communication skills, ownership mindset and ability to work effectively in a team environment
- English proficiency at B2 level or higher
Benefits
With us you can:
- Work on a flexible schedule remotely or from any of our comfortable offices or coworking spaces in Ukraine
- Receive the necessary equipment to perform your work tasks
- Change projects and technology stacks within EPAM
- Gain experience in various business domains (Insurance, E-commerce, Healthcare, Finance, Travelling, Media, Artificial Intelligence, and more)
- Relocation opportunities may be available for eligible candidates, depending on the role and openings at other EPAM locations
- Participate in volunteer, charity programs and communities (both technical and interest-based)
We focus on your professional growth:
- You can plan your individual career path together with your manager
- Receive regular feedback from colleagues
- Improve your English for free with certified teachers (Speaking Clubs, client interview preparation courses, etc.)
- Get the opportunity to undergo free training and certification in AWS, GCP, or Azure Clouds
- Use the internal E-learn training program (18,200+ specialized training and mentoring programs)
- Access corporate accounts on LinkedIn Learning, Get Abstract and other partner resources
- Study at EPAM Solution Architecture School with the instructors who are practicing architects
- Develop as a leader, join Delivery Management, Resource Management, Leadership Essentials school and more
- Participate in internal communities (500+ meetups, technical discussions, brainstorming sessions, online events and conferences annually)
What we offer:
- Vacation and sick leave (including a sick leave without a medical certificate)
- A wide range of Voluntary Medical Insurance programs providing both medical treatment and various preventive options (including sports activities)
- Medical insurance for family members at corporate rates
- Company support during significant life events (childbirth or adoption, marriage, etc.)
- Support for psychological comfort: discounts on services from mental health specialists or coaches, thematic training
- E-kids program - a free programming language training program for EPAMers' children