Head of App Security & Vulnerability Remediation

EPAM Systems, Inc.; México; A distancia; MXN 700.000 - 900.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare benefits

Paid time off

Sick leave

LinkedIn Learning access

Descripción de la vacante

EPAM Systems, Inc. is seeking a Lead Application Security Engineer in Mexico to lead vulnerability remediation across teams, starting with HackerOne findings and API/GraphQL issues.

You will own end-to-end workflow from intake to closure across Cybersecurity, Engineering, Product, and vendors. You will reproduce and validate findings using Postman and security tools, coordinate across multiple orgs, and deliver executive dashboards on backlog trends, SLA compliance, and risk reduction.

Formación

• 5+ years in software engineering or application security.
• Strong knowledge of REST APIs, GraphQL, OAuth/JWT.
• Experience with OWASP Top 10 and API Security Top 10.
• Hands-on in reproducing security findings.
• Proficiency with Postman; Jira and ServiceNow for tracking.
• Excellent stakeholder management and communication.

Responsabilidades

• Own HackerOne program end-to-end from intake to closure.
• Lead vulnerability triage, remediation tracking, and reporting.
• Coordinate remediation across multiple engineering teams.
• Deliver executive-ready dashboards on backlog trends and risk.
• Present status to cybersecurity and engineering leadership.
• Leverage GenAI to improve triage and reporting.

Conocimientos

HackerOne

Application Security

REST APIs

GraphQL

OAuth/JWT

OWASP Top 10

Postman

Jira

ServiceNow

Stakeholder Management

Herramientas

Burp Suite

GenAI tooling

Security Testing Tools

Descripción del empleo

EPAM Systems, Inc. is seeking a Lead Application Security Engineer in Mexico to lead vulnerability remediation across teams, starting with HackerOne findings and API/GraphQL issues.

You will own end-to-end workflow from intake to closure across Cybersecurity, Engineering, Product, and vendors. You will reproduce and validate findings using Postman and security tools, coordinate across multiple orgs, and deliver executive dashboards on backlog trends, SLA compliance, and risk reduction.