Lead Security Engineer - Container & Cloud Automation

EPAM Systems; Colombia; On-site; COP 120,000,000 - 180,000,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off & sick leave

Upskilling & certification courses

LinkedIn Learning access

Global career opportunities

Job summary

EPAM Systems is seeking a Lead-level Security Engineer to strengthen container and supply chain security. You will harden container images, secure Kubernetes workloads, and build tooling to convert scan results into tested fixes.

You will lead security automation efforts, drive remediation with engineering teams, and apply advanced Go-based tooling to secure CI/CD pipelines in cloud environments.

Qualifications

• 5+ years in security engineering, DevSecOps and automation.
• Lead remediation work with engineering teams to reach closure.
• Advanced Go for security tooling and CLIs.
• Strong AWS security knowledge: IAM, EKS/ECS.
• CI/CD pipelines with automated testing and security checks.
• Vulnerability management across SAST/DAST/SCA.

Responsibilities

• Build and maintain hardened container base images with automated tests.
• Implement Kubernetes security controls incl. runtime monitoring & policies.
• Secure software supply chain across builds, registries, infra config.
• Create security tooling using Go and automation services.
• Triage findings from pentests/DAST/SCA and patch remediation.
• Collaborate with engineers to prioritize findings and patches.
• Automate alerting and fix drafting using Gen AI-assisted tooling.

Skills

Go (Golang)

Kubernetes security

DevSecOps

Security automation

CI/CD security

Vulnerability management

Terraform

Gen AI tooling

Leadership

English communication

Tools

Terraform

Git

Jenkins

Docker

Kubernetes

Job description

EPAM Systems is seeking a Lead-level Security Engineer to strengthen container and supply chain security. You will harden container images, secure Kubernetes workloads, and build tooling to convert scan results into tested fixes.

You will lead security automation efforts, drive remediation with engineering teams, and apply advanced Go-based tooling to secure CI/CD pipelines in cloud environments.