Senior Security Architect

EPAM Systems; Bengaluru; On-site; INR 3,000,000 - 6,000,000; Full time

Benefits offered by this job

Health benefits

Retirement benefits

Paid time off

Flexible benefits

Job summary

EPAM Systems is seeking a Senior Security Architect to define and guide vulnerability analysis, remediation patterns, and engineering enablement across a large-scale portfolio. You will provide architectural leadership across application security, cloud security, and software supply-chain risk, collaborating with development, platform, TechOps, and product teams.

This role focuses on scalable remediation practices across thousands of repositories and many product groups, driving automated gates,

Qualifications

• 12-20 years of overall experience in IT with security architecture background.
• Expertise in SAST/DAST, Checkmarx, and CodeQL for secure code review and SDLC.
• Proficiency in cloud security (AWS, Wiz, IAM) and cloud configuration.

Responsibilities

• Provide architecture and leadership for Vulnerability Management workstream.
• Define approaches for analysis, validation, prioritization, and remediation.
• Guide remediation across app security, cloud config risks, and dependencies.
• Define fix patterns, runbooks, and remediation playbooks.
• Support DevSecOps controls and pipeline modernization for scale.

Skills

Vulnerability management

SAST/DAST

CodeQL

Checkmarx

Cloud security (AWS)

IAM

SBOM concepts

JFrog Xray

GitHub Actions

Azure DevOps

DevSecOps

Threat/risk analysis

Security automation

Tools

GitHub Actions

Azure DevOps

JFrog Xray

Checkmarx

CodeQL

Job description

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.We are seeking a Senior Security Architect to define and guide the technical approach for vulnerability analysis, prioritization, remediation patterns, and engineering enablement across a large-scale portfolio. This role will provide architectural leadership across application security, cloud security, and software supply-chain risk domains, working closely with development, platform, TechOps, and application teams to drive repeatable, scalable remediation practices across an environment of approximately 4,600 repositories, 20 major product groupings, and 1,800 developers.ResponsibilitiesProvide architecture and technical leadership for the Vulnerability Management workstreamEstablish approaches for vulnerability analysis, validation, prioritization, and remediation planningGuide remediation efforts across application and security code findings, cloud configuration risks, and vulnerable dependenciesDefine reusable fix patterns, remediation playbooks, and technical runbooksSupport engineers on complex vulnerabilities and root-cause analysisReview proof-of-concept fixes and remediation recommendationsHelp product teams reduce recurring vulnerabilities by improving engineering and security practicesSupport risk reporting and recurring vulnerability trend analysisDeliver senior architectural guidance while enabling engineers to execute repeatable remediation work at scaleSupport DevSecOps controls, automated quality gates, and Golden Pipeline modernization effortsContribute to migration readiness, execution, and post-migration stabilization activities related to GitHub and DevSecOps transformationRequirements12-20 years of overall experience in IT, with a strong background in security architecture and vulnerability managementExpertise in SAST/DAST, Checkmarx, and CodeQL for secure code review and secure SDLC practicesProficiency in cloud security, including AWS, Wiz, and IAM and cloud configuration and infrastructure securityKnowledge of software supply-chain security, including JFrog Xray, dependency security, and SBOM conceptsSkills in vulnerability management, threat/risk analysis, and remediation architectureUnderstanding of security automation and DevSecOps principlesFamiliarity with GitHub Actions and Azure DevOps pipeline migration, including runners, secrets, permissions, and deployment integrationsCapability to define and guide remediation playbooks and technical runbooks at scale across large, complex portfoliosWe offerOpportunity to work on technical challenges that may impact across geographiesVast opportunities for self-development: online university, knowledge sharing opportunities globally, learning opportunities through external certificationsOpportunity to share your ideas on international platformsSponsored Tech Talks & HackathonsUnlimited access to LinkedIn learning solutionsPossibility to relocate to any EPAM office for short and long-term projectsFocused individual developmentBenefit package:Health benefitsRetirement benefitsPaid time offFlexible benefitsForums to explore beyond work passion (CSR, photography, painting, sports, etc.)