Senior AI AppSec Engineer – Secure SDLC & AI Models

EPAM Systems Inc; Polska; Hybrid; PLN 180,000 - 320,000; Full time

Benefits offered by this job

Hybrid work by design

Remote work within Poland

Relocation opportunities

English classes

Health insurance

Multisport

Shopping vouchers

Employee Stock Purchase Plan with 15%/

Job summary

EPAM Systems Inc seeks a Senior Application Security Engineer to define and drive secure SDLC practices across client projects. You will lead security testing, threat modeling, and secure design, collaborating with developers to deliver secure code under tight deadlines.

The role requires strong OWASP knowledge, hands-on security tooling, and experience with Azure DevOps, GitHub Copilot, and Codex. English proficiency is essential; hybrid/remote work in Poland is available.

Qualifications

• 3+ years of experience in Application Security with a solid application development background.
• Hands-on experience with Azure DevOps and CI/CD pipelines.
• Familiarity with GitHub Copilot and Codex.
• Knowledge of OWASP Top 10 and secure design principles.
• Excellent English communication skills (B2+).
• Certification such as CISSP, CSSLP, CEH or OSCP is a plus.

Responsibilities

• Collaborate with software and security engineers to design and maintain product security tools and services.
• Serve as the technical point of contact for product teams regarding CI/CD security and Sec Ops.
• Leverage AI models and security harness to assess code for vulnerabilities and misconfigurations.
• Develop scripts to enable secure service consumption and automate security tasks.
• Lead security QA and testing activities across the SDLC.
• Improve SAST, DAST, and IaC security tool operations and cloud security coverage.

Skills

Application security

Threat modeling

Security architecture

CI/CD security

Communication

Education

Bachelor's degree in Computer Science or Cyber Security

CISSP or equivalent certification

Tools

Azure DevOps

GitHub Copilot

Codex

Python

JavaScript

C#

PowerShell

Job description

EPAM Systems Inc seeks a Senior Application Security Engineer to define and drive secure SDLC practices across client projects. You will lead security testing, threat modeling, and secure design, collaborating with developers to deliver secure code under tight deadlines.

The role requires strong OWASP knowledge, hands-on security tooling, and experience with Azure DevOps, GitHub Copilot, and Codex. English proficiency is essential; hybrid/remote work in Poland is available.