Lead/Senior Security System Engineer

EPAM Systems; Hyderabad; On-site; INR 3,000,000 - 4,500,000; Full time

Benefits offered by this job

Tech Talks & Hackathons

LinkedIn Learning Access

Relocation to EPAM offices

Online university access

Global knowledge sharing

External certifications

Job summary

EPAM Systems seeks a Lead/Senior Security System Engineer to guide vulnerability triage, perform in-depth analysis, and provide remediation guidance across applications, cloud environments, and the software supply chain. You will work with product and development teams to strengthen secure engineering practices and drive DevSecOps transformation.

You will analyze findings from Checkmarx, CodeQL, Wiz and JFrog Xray, develop proof-of-concept fixes, and create reusable fix patterns while mentoring

Qualifications

• 6–15 years of IT experience focused on application, cloud, and software supply chain security.
• Experience leading vulnerability triage, remediation guidance and secure coding practices.
• Proficiency with Checkmarx, CodeQL, SAST/DAST, secure SDLC and DevSecOps.

Responsibilities

• Lead technical triage, validation and prioritization of security vulnerabilities.
• Analyze findings from Checkmarx, CodeQL, Wiz and JFrog Xray.
• Develop remediation playbooks, proof-of-concept fixes and reusable patterns.
• Perform secure-code reviews and provide actionable recommendations to development teams.
• Guide migration and integration of GitHub Actions, Azure DevOps pipelines and related runners.

Skills

Checkmarx

CodeQL

SAST/DAST

DevSecOps

Secure SDLC

Vulnerability triage

Threat modeling

Tools

AWS

Wiz

IAM

JFrog Xray

GitHub Actions

Azure DevOps

Job description

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.We are seeking a Lead/Senior Security System Engineer to lead vulnerability triage, technical analysis, remediation guidance, and the development of reusable fix patterns across applications, cloud environments, and the software supply chain. This role involves close collaboration with product and development teams to strengthen secure engineering practices, drive DevSecOps transformation initiatives, and reduce security exposure across a large-scale portfolio.ResponsibilitiesLead technical triage, validation and prioritization of security vulnerabilitiesAnalyze findings from Checkmarx, CodeQL, Wiz and JFrog XrayDirect investigation of application-code, cloud-configuration, IAM, dependency and software supply-chain vulnerabilitiesDevelop proof-of-concept fixes, remediation guidance and reusable fix patternsPerform secure-code reviews and provide actionable recommendations to development teamsCreate remediation playbooks, runbooks and technical guidanceSupport root-cause analysis for recurring or complex vulnerabilitiesReview engineering outputs and provide technical guidance to Senior Security EngineersPartner with product/development teams to improve secure engineering practices and reduce recurring findingsSupport vulnerability reduction planning, prioritized backlogs, risk reporting and recurring trend analysisGuide GitHub repository migration, GitHub Actions and Azure DevOps pipeline migration, and related runners, secrets, permissions and deployment integrationsContribute to Checkmarx onboarding, DevSecOps controls, automated quality gates and Golden Pipeline modernizationRequirements6-15 years of overall experience in IT, with a focus on application security, cloud security and software supply-chain securityExpertise in Checkmarx, CodeQL, SAST/DAST, secure code review and secure SDLC practicesProficiency in AWS, Wiz, IAM and cloud configuration securitySkills in JFrog Xray, dependency analysis, Chainguard and SBOM conceptsBackground in DevSecOps, vulnerability triage, root-cause analysis and remediation pattern developmentKnowledge of security automation and vulnerability management at scaleFamiliarity with GitHub repository migration, GitHub Actions and Azure DevOps pipeline migrationUnderstanding of artifact and dependency governance, curation policies and automated policy validationCapability to lead technical teams and provide guidance to senior security engineersExperience working within large-scale, portfolio-wide security enablement programsWe offerOpportunity to work on technical challenges that may impact across geographiesVast opportunities for self-development: online university, knowledge sharing opportunities globally, learning opportunities through external certificationsOpportunity to share your ideas on international platformsSponsored Tech Talks & HackathonsUnlimited access to LinkedIn learning solutionsPossibility to relocate to any EPAM office for short and long-term projectsFocused individual developmentBenefit package:Health benefitsRetirement benefitsPaid time offFlexible benefitsForums to explore beyond work passion (CSR, photography, painting, sports, etc.)