Lead Security System Engineer

EPAM Systems Inc; Chennai, Coimbatore District, Gurugram District; On-site; INR 3,000,000 - 6,000,000; Full time

Job summary

EPAM Systems Inc. is seeking a Lead Security System Engineer to drive vulnerability validation, remediation strategy, and repeatable fix patterns across applications, cloud environments, and the software supply chain.

You will embed secure engineering practices, modernize DevSecOps workflows, and reduce exposure across a broad portfolio. Collaborate with product and engineering teams to implement secure design principles, perform secure-code reviews, and publish actionable remediation guidance.

Qualifications

• Advanced proficiency in SAST/DAST and secure SDLC practices.
• Experience with application security across cloud and software supply chains.
• Security automation at scale and vulnerability management.

Responsibilities

• Lead validation, triage, and prioritization of reported security vulnerabilities.
• Evaluate findings from Checkmarx, CodeQL, Wiz, and JFrog Xray.
• Coordinate investigations into application-code, cloud-configuration, IAM, dependency, and software supply-chain vulnerabilities.
• Build proof-of-concept fixes, provide remediation guidance, and publish reusable fix patterns.
• Conduct secure-code reviews and share actionable recommendations with development teams.
• Author remediation playbooks, runbooks, and practical technical guidance.
• Perform root-cause analysis to support recurring or complex vulnerabilities.
• Assess engineering outputs and provide guidance to senior security engineers.
• Collaborate with product and development teams to improve secure engineering practices.
• Enable vulnerability reduction planning, backlog prioritization, risk reporting, and trend analysis.
• Lead GitHub repository migration, GitHub Actions and Azure DevOps pipeline migration.
• Help deliver Checkmarx onboarding, DevSecOps controls, automated quality gates, and Golden Pipeline modernization.

Skills

Leadership

Strategic security planning

Threat modeling

Tools

Checkmarx

CodeQL

Wiz

JFrog Xray

GitHub Actions

Azure DevOps

AWS

Chainguard

SBOM concepts

Job description

We are hiring a Lead Security System Engineer to steer vulnerability validation, remediation strategy, and repeatable fix patterns across applications, cloud environments, and the software supply chain. You will collaborate with product and engineering teams to embed secure engineering practices, modernize DevSecOps workflows, and lower exposure across a broad portfolio—

Responsibilities

• Lead validation, triage, and prioritization of reported security vulnerabilities
• Evaluate findings produced by Checkmarx, CodeQL, Wiz, and JFrog Xray
• Coordinate investigations into application-code, cloud-configuration, IAM, dependency, and software supply-chain vulnerabilities
• Build proof-of-concept fixes, provide remediation guidance, and publish reusable fix patterns
• Conduct secure-code reviews and share actionable recommendations with development teams
• Author remediation playbooks, runbooks, and practical technical guidance
• Perform root-cause analysis support for recurring or complex vulnerabilities
• Assess engineering outputs and provide technical guidance to Senior Security Engineers
• Collaborate with product and development teams to improve secure engineering practices and reduce recurring findings
• Enable vulnerability reduction planning, backlog prioritization, risk reporting, and recurring trend analysis
• Lead GitHub repository migration, GitHub Actions and Azure DevOps pipeline migration, covering runners, secrets, permissions, and deployment integrations
• Help deliver Checkmarx onboarding, DevSecOps controls, automated quality gates, and Golden Pipeline modernization

Requirements

• Significant IT experience centered on application security, cloud security, and software supply-chain security
• Advanced proficiency in Checkmarx, CodeQL, SAST/DAST, secure code review, and secure SDLC practices
• Practical expertise with AWS, Wiz, IAM, and cloud configuration security controls
• Strong knowledge of JFrog Xray, dependency analysis, Chainguard, and SBOM concepts
• Hands-on background in DevSecOps, vulnerability triage, root-cause analysis, and building remediation patterns
• Demonstrated experience with security automation and running vulnerability management at scale
• Familiarity with GitHub repository migration, GitHub Actions, and Azure DevOps pipeline migration
• Clear understanding of artifact and dependency governance, curation policies, and automated policy validation
• Proven ability to lead technical teams and provide direction to senior security engineers
• Experience operating within large-scale, portfolio-wide security enablement programs