Текст заказа
We are seeking a Senior Application Security Engineer to define consistent Security Software Development Lifecycle practices across all client technology projects.
In this role, you will ensure application security vulnerabilities are mitigated to tolerable levels throughout the planning and delivery cycles.
The ideal candidate brings strong application security knowledge, web application development experience, and team leadership skills, along with a solid understanding of OWASP, CWE25, Data Protection, Access Management, software vulnerabilities, secure design best practices, and threat modeling. You will collaborate with developers to produce secure code under tight deadlines in a dynamic environment.
Responsibilities
Collaborate as part of a team of software and security engineers to design, maintain, and build product security tools and services
Serve as the technical point of contact for product teams regarding CI/CD automation and Product Application Sec Ops
Leverage approved AI models and Cyber Harness to assess application code for business logic weaknesses, misconfigurations, and vulnerabilities
Build and automate scripts that enable developers to easily consume security services delivered by the Sec Engineering and Automation team
Own security product QA and testing activities
Run software composition analysis (SCA) tools
Interpret and explain penetration testing findings to the software engineering team, assisting them with triage and risk mitigation guidance
Articulate business risk when assessing software vulnerabilities
Continuously improve the operations of SAST, DAST, and IaC security tools
Enhance the operations of Web Application Firewalls (WAF) and IDS
Expand security coverage and tooling in cloud environments such as Microsoft Azure and AWS
Requirements
Degree in Computer Science or Cyber Security
3+ years of experience in Application Security with a strong application development background
Hands-on experience with Azure DevOps
Prior experience using AI models and Cyber Harness to support security evaluation of applications and software code
Familiarity with GitHub, Copilot, and Codex
Knowledge of OWASP Top 10 for Agentic AI, AI skills development, and security triage
Proficiency in coding with Python, JavaScript, C#, or PowerShell
Deep understanding of OWASP, CWE25, Data Protection, Access Management, software vulnerabilities, secure design best practices, and threat modeling
Excellent analytical skills with strong attention to detail
CISSP, CSSLP, CEH, OSCP, or similar certification
Presentation skills with the ability to communicate complex solutions to less technical audiences
Excellent command of written and spoken English (B2+ level)
Nice to have
Prior experience working in a large organization or within Financial Services
Exposure to secure SDLC program definition across enterprise technology projects
We offer
We gather like-minded people:
Top tech minds driving innovation in AI, cloud and digital platform modernization
Supportive team and agile, startup-like culture
Hybrid by design mode and opportunity to work remotely within Poland
Chance to work abroad for up to 60 days annually
Business-driven relocation opportunities
We provide growth opportunities:
Career development programs
Thought leadership, mentoring, soft skills and well-being programs
Certification (Anthropic, Gemini, GCP, Azure, AWS)
English classes
We cover it all:
Stable pay
Participation in the Employee Stock Purchase Plan with a 15% discount
Benefits package (health insurance, multisport, shopping vouchers)
Referral bonuses up to $2,000
Offices featuring entertainment and relaxation zones, table tennis and football, free snacks, coffee and more
Corporate, social and well-being events
Please, note:
Benefits listed above are available to employees only
We are open for working with Contractors. Terms of B2B cooperation agreements are agreed individually
We will reach out to selected candidates exclusively
EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.