Lead AppSec Engineer: Bug Bounty, API & GraphQL Security

EPAM Systems, Inc.; México; A distancia; MXN 900.000 - 1.300.000; Jornada completa

Descripción de la vacante

EPAM Systems, Inc. seeks a Senior Application Security Engineer to own and drive vulnerability remediation programs, with initial focus on HackerOne findings, API security vulnerabilities, GraphQL authorization issues, and cross-functional remediation tracking.

The role serves as the operational owner of the remediation lifecycle, coordinating with Cybersecurity, Engineering, Product, and external vendors to ensure timely identification, validation, assignment, remediation, and closure of

Formación

• 3+ years of experience in software engineering or application security.
• Understanding of REST APIs, GraphQL, OAuth/JWT, and OWASP Top 10.
• Experience with Postman, Jira, and ServiceNow.

Responsabilidades

• Own day-to-day HackerOne program management and triage.
• Coordinate remediation tracking across multiple engineering teams.
• Produce executive-level reporting and dashboards on backlog, SLA, remediation progress, and risk reduction.

Descripción del empleo

EPAM Systems, Inc. seeks a Senior Application Security Engineer to own and drive vulnerability remediation programs, with initial focus on HackerOne findings, API security vulnerabilities, GraphQL authorization issues, and cross-functional remediation tracking.

The role serves as the operational owner of the remediation lifecycle, coordinating with Cybersecurity, Engineering, Product, and external vendors to ensure timely identification, validation, assignment, remediation, and closure of