Lead/Senior Security System Engineer

EPAM Systems; Bengaluru; On-site; INR 2,500,000 - 4,500,000; Full time

Benefits offered by this job

Health benefits

Retirement benefits

Paid time off

Flexible benefits

LinkedIn learning access

Job summary

EPAM Systems in Bengaluru seeks a Lead/Senior Security System Engineer to lead vulnerability triage, analyze findings from Checkmarx, CodeQL, Wiz and JFrog Xray, and provide remediation guidance across applications, cloud environments, and the software supply chain.

You will collaborate with product and development teams to improve secure engineering practices, drive DevSecOps initiatives, and reduce security exposure at scale while guiding teams through migrations and automation efforts.

Qualifications

• 6–15 years of IT security experience with focus on application security and cloud security.
• Expertise in SAST/DAST, secure code reviews and secure SDLC practices.
• Experience with security automation and vulnerability management at scale.

Responsibilities

• Lead vulnerability triage, validation and prioritization across portfolios.
• Analyze findings from Checkmarx, CodeQL, Wiz and JFrog Xray.
• Develop remediation guidance and reusable fix patterns.
• Perform secure-code reviews and guidance to development teams.
• Support DevSecOps transformations and secure engineering practices.
• Guide repository migrations and pipeline integrations (GitHub, Azure DevOps).
• Create playbooks, runbooks and technical guidance for remediation.

Skills

Vulnerability triage

DevSecOps practices

Secure SDLC

Root-cause analysis

Team leadership

Tools

Checkmarx

CodeQL

Wiz

JFrog Xray

GitHub Actions

Azure DevOps

IAM

Job description

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.We are seeking a Lead/Senior Security System Engineer to lead vulnerability triage, technical analysis, remediation guidance, and the development of reusable fix patterns across applications, cloud environments, and the software supply chain. This role involves close collaboration with product and development teams to strengthen secure engineering practices, drive DevSecOps transformation initiatives, and reduce security exposure across a large-scale portfolio.ResponsibilitiesLead technical triage, validation and prioritization of security vulnerabilitiesAnalyze findings from Checkmarx, CodeQL, Wiz and JFrog XrayDirect investigation of application-code, cloud-configuration, IAM, dependency and software supply-chain vulnerabilitiesDevelop proof-of-concept fixes, remediation guidance and reusable fix patternsPerform secure-code reviews and provide actionable recommendations to development teamsCreate remediation playbooks, runbooks and technical guidanceSupport root-cause analysis for recurring or complex vulnerabilitiesReview engineering outputs and provide technical guidance to Senior Security EngineersPartner with product/development teams to improve secure engineering practices and reduce recurring findingsSupport vulnerability reduction planning, prioritized backlogs, risk reporting and recurring trend analysisGuide GitHub repository migration, GitHub Actions and Azure DevOps pipeline migration, and related runners, secrets, permissions and deployment integrationsContribute to Checkmarx onboarding, DevSecOps controls, automated quality gates and Golden Pipeline modernizationRequirements6-15 years of overall experience in IT, with a focus on application security, cloud security and software supply-chain securityExpertise in Checkmarx, CodeQL, SAST/DAST, secure code review and secure SDLC practicesProficiency in AWS, Wiz, IAM and cloud configuration securitySkills in JFrog Xray, dependency analysis, Chainguard and SBOM conceptsBackground in DevSecOps, vulnerability triage, root-cause analysis and remediation pattern developmentKnowledge of security automation and vulnerability management at scaleFamiliarity with GitHub repository migration, GitHub Actions and Azure DevOps pipeline migrationUnderstanding of artifact and dependency governance, curation policies and automated policy validationCapability to lead technical teams and provide guidance to senior security engineersExperience working within large-scale, portfolio-wide security enablement programsWe offerOpportunity to work on technical challenges that may impact across geographiesVast opportunities for self-development: online university, knowledge sharing opportunities globally, learning opportunities through external certificationsOpportunity to share your ideas on international platformsSponsored Tech Talks & HackathonsUnlimited access to LinkedIn learning solutionsPossibility to relocate to any EPAM office for short and long-term projectsFocused individual developmentBenefit package:Health benefitsRetirement benefitsPaid time offFlexible benefitsForums to explore beyond work passion (CSR, photography, painting, sports, etc.)