Senior Security Engineer

EPAM Systems; Argentina; On-site; ARS 2,500,000 - 4,000,000; Full time

Benefits offered by this job

Healthcare benefits

Global career opportunities

Unlimited LinkedIn Learning access

Volunteer opportunities

Job summary

EPAM Systems is seeking a Senior Security Engineer to strengthen the software supply chain and container security through practical automation and hands-on remediation. You will partner with engineering teams to harden Kubernetes workloads, improve CI/CD guardrails, and ship tested fixes.

You will build hardened container base images, implement runtime controls and admission policies, and embed security checks into pipelines for rapid feedback.

Qualifications

• 3+ years of security engineering in SaaS with DevSecOps focus.
• Proven leadership to drive remediation with engineering teams.
• Hands-on in delivering hardened container images and Kubernetes controls.
• Strong Go programming for security tooling/CLIs/services.
• Solid CI/CD with automated testing and security checks.
• Deep AWS security knowledge including IAM and container services (EKS/ECS).
• Kubernetes security expertise: network policies and admission controllers.
• Vulnerability management across SAST, DAST, pentesting, and SCA.
• Terraform IaC for cloud and security configurations.
• Strong communication to explain findings to engineers.
• English level: Upper-Intermediate (B2+).

Responsibilities

• Build and maintain hardened container base images for dev/prod use.
• Implement Kubernetes security controls including runtime monitoring and policies.
• Embed security checks into CI/CD pipelines for fast automated feedback.
• Secure software supply chain workflows across build systems and registries.
• Write security utilities and services in Go.
• Triage vulnerabilities from pentests, SAST, DAST, and SCA.
• Collaborate with teams to prioritize issues and patch dependencies.
• Automate alert grouping and fixes using AI/LLM integrations.
• Review and test generated code before merges.

Skills

Security engineering

Leadership

Go programming

CI/CD automation

AWS security

Kubernetes security

Vulnerability management

Terraform IaC

Communication

AI/LLM caution

Tools

Kubernetes

Terraform

AWS (IAM, EKS, ECS)

Go (Golang) tooling

Job description

We are looking for a Senior Security Engineer to strengthen the software supply chain and container security through practical automation and hands-on remediation. You will partner with engineering teams to harden Kubernetes workloads, improve CI/CD guardrails, and ship tested fixes.

Responsibilities

• Build and maintain hardened container base images for development and production use
• Implement Kubernetes security controls including runtime monitoring, network policies, and admission controllers
• Embed security checks and policy gates into CI/CD pipelines to deliver fast, automated feedback
• Secure software supply chain workflows across build systems, registries, and infrastructure-as-code
• Write and maintain security automation utilities and services in Go
• Triage vulnerabilities from pentests, SAST, DAST, and SCA and separate real risks from noise
• Partner with engineering teams to prioritize issues and commit remediation patches and dependency upgrades
• Automate alert grouping and first-pass fixes using LLMs and Model Context Protocol integrations
• Review and test all generated code before merging changes into codebases

Requirements

• 3+ years of security engineering experience in SaaS environments with DevSecOps and automation focus
• Proven leadership ability to partner with engineering teams and drive remediation to completion
• Hands-on project experience delivering hardened container images and Kubernetes security controls in production
• Strong Go (Golang) programming skills for building security tooling, CLIs, or services
• Solid CI/CD pipeline experience with automated testing and security checks
• Deep AWS security knowledge including IAM and container services such as EKS and ECS
• Practical Kubernetes security expertise including network policies, runtime controls, and admission controllers
• Strong vulnerability management skills across SAST, DAST, pentesting, and SCA with false-positive triage
• Terraform infrastructure-as-code skills for cloud and security configurations
• Strong communication skills to explain findings and provide actionable fixes to engineers
• Careful verification mindset when using AI coding assistants and LLM-driven automation
• Upper-Intermediate English proficiency (B2, Upper-Intermediate)

Nice to have

• Model Context Protocol (MCP) integration experience for security automation
• Supply chain security experience with SLSA, in-toto, Sigstore/Cosign, and SBOMs (SPDX or CycloneDX)
• Microsoft Azure (AKS) experience securing container workloads
• Node.js or TypeScript development experience

We offer

• International projects with top brands
• Work with global teams of highly skilled, diverse peers
• Healthcare benefits
• Employee financial programs
• Paid time off and sick leave
• Upskilling, reskilling and certification courses
• Unlimited access to the LinkedIn Learning library and 22,000+ courses
• Global career opportunities
• Volunteer and community involvement opportunities
• EPAM Employee Groups
• Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn