Lead Product Owner

EPAM Systems; Colombia; On-site; COP 36,000,000 - 60,000,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

Certification courses

LinkedIn Learning access

Global career opportunities

Volunteer opportunities

Job summary

EPAM Systems is seeking a Lead Product Owner to drive end-to-end remediation of security vulnerabilities across a web app ecosystem. You will align stakeholders, translate findings into actionable backlog items, and ensure timely validation and release.

You will own the backlog, coordinate delivery across engineering, QA, security and business teams, and guide planning and agile ceremonies to meet delivery commitments.

Qualifications

• 5+ years experience as Product Owner or Business Analyst.
• Backlog management, prioritization and delivery planning experience.
• Strong leadership coordinating engineering, QA, security and business stakeholders.
• PM skills with dependency, risk and commitment tracking.
• Solid knowledge of web app security (OWASP) and remediation workflows.
• Hands-on with SAST/SCA/DAST tools such as Veracode.
• Proficient with Jira and Confluence for requirements and planning.
• Strong analytical skills translating findings into requirements and acceptance criteria.
• Excellent communication for status updates and escalation.
• Knowledge of GenAI for BA Productivity & SDLC, PM, and stakeholder management.
• Upper-Intermediate English (B2) proficiency.

Responsibilities

• Own and prioritize the security vulnerability remediation backlog.
• Coordinate remediation delivery across engineering, QA, security, and business stakeholders.
• Translate security findings into clear requirements, backlog items, and acceptance criteria.
• Drive vulnerabilities through analysis, remediation, testing, validation, release, and closure.
• Prioritize work by severity, business risk, deadlines, and dependencies.
• Track progress, risks, blockers, dependencies and remediation commitments.
• Coordinate validation of findings from Veracode or similar tools.
• Facilitate planning and Agile ceremonies to ensure delivery commitments are met.
• Coordinate release planning and regression and security validation.
• Maintain clear status reporting and escalated critical risks or delays.
• Support AI-assisted practices to improve analysis, remediation, testing, and productivity.

Skills

Product Ownership

Leadership

Project management

Stakeholder management

Analytical thinking

Communication

English (B2)

Tools

Jira

Confluence

Veracode

Job description

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.

We are looking for a Lead Product Owner to drive end-to-end delivery of security vulnerability remediation across a web application ecosystem. You will align stakeholders, translate security findings into actionable backlog items, and ensure timely validation and release.

Responsibilities

• Own and prioritize the security vulnerability remediation backlog
• Coordinate remediation delivery across engineering, QA, security, and business stakeholders
• Translate security findings into clear requirements, backlog items, and acceptance criteria
• Drive vulnerabilities through analysis, remediation, testing, validation, release, and closure
• Prioritize work by severity, business risk, deadlines, and technical dependencies
• Track progress, risks, blockers, dependencies, and remediation commitments
• Coordinate validation of findings from Veracode or similar SAST/SCA/DAST tools
• Facilitate planning and Agile ceremonies to ensure delivery commitments are met
• Coordinate release planning and regression and security validation
• Maintain clear status reporting and escalated critical risks or delays
• Support AI-assisted practices to improve analysis, remediation, testing, and team productivity

Requirements

• 5+ years of experience as a Product Owner or Business Analyst
• Experience in backlog management, prioritization, and delivery planning
• Strong leadership skills coordinating engineering, QA, security, and business stakeholders
• Strong project management skills with dependency, risk, and commitment tracking
• Solid technical knowledge of web application security, OWASP risks, and remediation workflows
• Hands-on familiarity with SAST/SCA/DAST tools such as Veracode or similar
• Proficiency with Jira and Confluence for requirements, planning, and status reporting
• Strong analytical skills to translate findings into requirements and acceptance criteria
• Strong communication skills for clear status updates and proactive escalation
• Knowledge of GenAI for BA Productivity & SDLC, Product Management, Project Management, Project Team Management, and Stakeholder Management
• Upper-Intermediate English (B2) proficiency

Nice to have

• Agile and Scrum facilitation experience
• Understanding of common security vulnerabilities and remediation best practices

We offer

• International projects with top brands
• Work with global teams of highly skilled, diverse peers
• Healthcare benefits
• Employee financial programs
• Paid time off and sick leave
• Upskilling, reskilling and certification courses
• Unlimited access to the LinkedIn Learning library and 22,000+ courses
• Global career opportunities
• Volunteer and community involvement opportunities
• EPAM Employee Groups
• Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn

EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.