Lead AI Security Engineer — Remote/Hybrid

EPAM Systems; Poland; Hybrid; PLN 280,000 - 480,000; Full time

Benefits offered by this job

Health insurance

Employee stock purchase plan

Hybrid by design (Poland)

English classes

Job summary

EPAM Systems seeks a Lead AI Security Engineer to embed security across the full software development lifecycle. You will drive secure design, code, build and release, and integrate AI-powered AppSec tooling into CI/CD pipelines.

You will collaborate with engineering teams, conduct threat modeling, code reviews, and implement policy-as-code, SBOMs, and AI-assisted automation to reduce risk while preserving velocity.

Qualifications

• Hands-on application security across the software development lifecycle.
• Strong understanding of OWASP Top 10 and secure coding principles.
• Experience with SAST, DAST, SCA and secrets scanning, integrated into CI/CD.
• Proficiency in reading code in at least one language (Python, Java, C#, JavaScript/TypeScript, or Go).
• Experience with threat modeling and secure design reviews.
• Understanding of DevOps/DevSecOps and cloud concepts (Azure/AWS/GCP).

Responsibilities

• Embed security into the full software development lifecycle and drive shift-left practices across engineering teams.
• Perform threat modeling, architecture security reviews, and design reviews for applications, services, and APIs.
• Conduct secure code reviews (manual and AI-assisted) and advise developers on secure coding patterns and remediation.
• Implement and operate application security tooling (SAST, DAST, SCA, secrets scanning) integrated into CI/CD pipelines.
• Triage, validate, prioritize, and reduce false positives in security findings and drive remediation with development teams.
• Define and maintain security gates and policies in CI/CD pipelines to balance risk and velocity.
• Secure the software supply chain (SBOM, artifact integrity, signing, build hardening).
• Support application penetration testing and validate fixes for vulnerabilities.
• Drive secrets management, API security, container and microservice security practices.
• Establish security champions program and deliver secure-coding training and reusable patterns.
• Define and enforce application security standards and policy-as-code.

Skills

Application security

Threat modeling

CI/CD security

AI-assisted tooling

Secure coding practices

DevSecOps

Cross-functional collaboration

Communication skills

Education

Bachelor's degree in Computer Science/Information Security/Engineering

Tools

SAST

DAST

SCA

Secrets scanning

IaC scanning

Job description

EPAM Systems seeks a Lead AI Security Engineer to embed security across the full software development lifecycle. You will drive secure design, code, build and release, and integrate AI-powered AppSec tooling into CI/CD pipelines.

You will collaborate with engineering teams, conduct threat modeling, code reviews, and implement policy-as-code, SBOMs, and AI-assisted automation to reduce risk while preserving velocity.