Lead AppSec Engineer: Drive API Security & HackerOne Remediation

EPAM Systems, Inc.; Colombia; A distancia; COP 200.880.000 - 357.120.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare benefits

Paid time off

LinkedIn Learning access

Global career opportunities

Descripción de la vacante

EPAM Systems, Inc. is seeking a Lead Application Security Engineer to steer vulnerability remediation across teams, starting with HackerOne findings and API/GraphQL issues.

You will own the end-to-end workflow from intake and validation to remediation tracking and closure across Cybersecurity, Engineering, Product, and vendors. You will reproduce and validate findings with Postman and security tools, guide remediation priorities, manage stakeholders, and deliver exec-ready dashboards on backlog

Formación

• 5+ years of experience in Software Engineering or Application Security.
• Strong understanding of REST APIs, GraphQL, OAuth, JWT, and OWASP Top 10.
• Hands-on experience reproducing security findings.
• Proficiency with Postman and security testing tools.
• Experience with Jira and ServiceNow for tracking workflows.

Responsabilidades

• Lead vulnerability intake, triage, validation, assignment, tracking, and closure end to end.
• Run weekly operating reviews with HackerOne and internal stakeholders.
• Deliver executive-ready reporting on backlog trends, SLA compliance, and risk reduction.
• Coordinate remediation across multiple engineering teams and vendors.
• Reproduce and validate findings and guide remediation prioritization.

Conocimientos

Security testing

Vulnerability remediation

API security

Full-stack dev

Stakeholder mgmt

GenAI automation

Educación

Bachelor's degree in Computer Science or related field

Herramientas

Postman

Burp Suite

Jira

ServiceNow

Descripción del empleo

EPAM Systems, Inc. is seeking a Lead Application Security Engineer to steer vulnerability remediation across teams, starting with HackerOne findings and API/GraphQL issues.

You will own the end-to-end workflow from intake and validation to remediation tracking and closure across Cybersecurity, Engineering, Product, and vendors. You will reproduce and validate findings with Postman and security tools, guide remediation priorities, manage stakeholders, and deliver exec-ready dashboards on backlog