AI Security Lead - Secure-by-Design & Automation

EPAM Systems; Polska; Hybrid; PLN 180,000 - 270,000; Full time

Benefits offered by this job

Hybrid by design (Poland)

Remote work options in Poland

Relocation opportunities

Stock purchase plan

Health insurance

Multisport

Shopping vouchers

Bonus/Performance incentives

Job summary

EPAM Systems seeks a Lead AI Security Engineer to secure software across the full development lifecycle. You will embed security into design, code, build and release; operate security tooling and pipelines; and drive remediation with engineering teams.

You will apply AI to accelerate AppSec work and secure AI- and LLM-powered applications, establishing gates, risk-based policies, and responsible AI security practices across projects.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent practical experience.
• Hands-on application security experience across the software development lifecycle.
• Strong understanding of OWASP Top 10 and secure coding principles.
• Practical experience with application security tooling and CI/CD integration.
• Proficiency in at least one programming language (Python, Java, C#, JavaScript/TypeScript, or Go).
• Experience with threat modeling and secure design reviews.
• Familiarity with cloud security concepts across Azure, AWS, or GCP.

Responsibilities

• Embed security into the full software development lifecycle and drive shift-left practices across engineering teams.
• Perform threat modeling, architecture security reviews, and design reviews for applications, services, and APIs.
• Conduct secure code reviews (manual and AI-assisted) and advise developers on secure coding patterns.
• Implement and operate application security tooling integrated into CI/CD pipelines (SAST, DAST, SCA, secrets scanning, IaC scanning).
• Triage, validate, and remediate security findings in collaboration with development teams.
• Define security gates and policy-as-code in CI/CD pipelines to balance risk and velocity.
• Secure the software supply chain, SBOM generation, and build pipeline hardening.
• Coordinate penetration testing and validate fixes for vulnerabilities.
• Drive AI-assisted automations for AppSec tasks and secure-coding training for developers.

Skills

Application security

Threat modeling

Secure code reviews

CI/CD security

SAST

DAST

SCA

Secrets scanning

IaC scanning

DevSecOps

Education

Bachelor's degree in Computer Science, Information Security, Engineering

Tools

SAST

DAST

SCA

Secrets scanning

IaC scanning

Job description

EPAM Systems seeks a Lead AI Security Engineer to secure software across the full development lifecycle. You will embed security into design, code, build and release; operate security tooling and pipelines; and drive remediation with engineering teams.

You will apply AI to accelerate AppSec work and secure AI- and LLM-powered applications, establishing gates, risk-based policies, and responsible AI security practices across projects.