Senior Security Architect

EPAM Systems; India; On-site; INR 3,500,000 - 6,500,000; Full time

Job summary

EPAM Systems is seeking a Senior Security Architect to define and guide the technical approach for vulnerability analysis, prioritization, remediation patterns, and engineering enablement across a large-scale portfolio.

You will provide architectural leadership across application security, cloud security, and software supply-chain risk domains, working with multiple teams to drive scalable remediation practices across thousands of repositories and developers.

Qualifications

• 12–20 years of IT experience with a strong background in security architecture and vulnerability management.
• Expertise in SAST/DAST, Checkmarx, and CodeQL for secure code review and secure SDLC practices.
• Cloud security proficiency across AWS, Wiz and IAM with cloud configuration and infrastructure security.
• Knowledge of software supply-chain security including SBOM concepts and dependency security.
• Skills in vulnerability management, threat/risk analysis and remediation architecture.
• Understanding of security automation and DevSecOps principles.
• Familiarity with GitHub Actions and Azure DevOps pipeline migration and deployment integrations.
• Ability to define and guide remediation playbooks and technical runbooks at scale.

Responsibilities

• Provide architecture and technical leadership for vulnerability management workstream.
• Establish approaches for vulnerability analysis, prioritization, and remediation planning.
• Guide remediation across application security, cloud configuration risks, and vulnerable dependencies.
• Define reusable fix patterns, remediation playbooks, and technical runbooks.
• Support engineers on complex vulnerabilities and root-cause analysis.
• Review proof-of-concept fixes and remediation recommendations.
• Help product teams reduce recurring vulnerabilities by improving engineering and security practices.
• Support risk reporting and vulnerability trend analysis.
• Deliver senior architectural guidance enabling repeatable remediation at scale.
• Support DevSecOps controls, automated quality gates, and Golden Pipeline modernization.
• Contribute to migration readiness and post-migration stabilization related to GitHub and DevSecOps transformation.

Skills

Security architecture

Vulnerability management

Threat/risk analysis

DevSecOps

Cloud security

Tools

Checkmarx

CodeQL

AWS

Wiz

JFrog Xray

GitHub Actions

Azure DevOps

Job description

We are seeking a Senior Security Architect to define and guide the technical approach for vulnerability analysis, prioritization, remediation patterns, and engineering enablement across a large-scale portfolio. This role will provide architectural leadership across application security, cloud security, and software supply-chain risk domains, working closely with development, platform, TechOps, and application teams to drive repeatable, scalable remediation practices across an environment of approximately 4,600 repositories, 20 major product groupings, and 1,800 developers.

Responsibilities

• Provide architecture and technical leadership for the Vulnerability Management workstream
• Establish approaches for vulnerability analysis, validation, prioritization, and remediation planning
• Guide remediation efforts across application and security code findings, cloud configuration risks, and vulnerable dependencies
• Define reusable fix patterns, remediation playbooks, and technical runbooks
• Support engineers on complex vulnerabilities and root-cause analysis
• Review proof-of-concept fixes and remediation recommendations
• Help product teams reduce recurring vulnerabilities by improving engineering and security practices
• Support risk reporting and recurring vulnerability trend analysis
• Deliver senior architectural guidance while enabling engineers to execute repeatable remediation work at scale
• Support DevSecOps controls, automated quality gates, and Golden Pipeline modernization efforts
• Contribute to migration readiness, execution, and post-migration stabilization activities related to GitHub and DevSecOps transformation

Requirements

• 12-20 years of overall experience in IT, with a strong background in security architecture and vulnerability management
• Expertise in SAST/DAST, Checkmarx, and CodeQL for secure code review and secure SDLC practices
• Proficiency in cloud security, including AWS, Wiz, and IAM and cloud configuration and infrastructure security
• Knowledge of software supply-chain security, including JFrog Xray, dependency security, and SBOM concepts
• Skills in vulnerability management, threat/risk analysis, and remediation architecture
• Understanding of security automation and DevSecOps principles
• Familiarity with GitHub Actions and Azure DevOps pipeline migration, including runners, secrets, permissions, and deployment integrations
• Capability to define and guide remediation playbooks and technical runbooks at scale across large, complex portfolios