Senior AI Security Engineer: Secure SDLC & Automation

EPAM Systems Inc; Polska; Hybrid; PLN 180,000 - 260,000; Full time

Job summary

EPAM Systems Inc. seeks a seasoned security engineering professional to embed security across the software development lifecycle, drive threat modeling, and lead secure coding reviews.

You will implement and tune SAST/DAST/IAST, SCA, and IaC scanning within CI/CD, reduce false positives, and coordinate vulnerability remediation with development teams. The role emphasizes AI-assisted security workflows and strategic security governance.

Qualifications

• Bachelor's degree in CS/Info Security/Engineering or equivalent practical experience.
• Hands-on application security experience across the software development lifecycle.
• Solid understanding of OWASP Top 10 and secure coding principles.
• Experience with SAST, DAST, SCA, and secrets scanning integrated into CI/CD.
• Proficiency in reading code in at least one language (Python, Java, C#, JS/TS, or Go).
• Experience with threat modeling and secure design reviews.
• Knowledge of DevOps/DevSecOps and cloud security concepts (Azure/AWS/GCP).
• Ability to collaborate across developers, architects, QA, DevOps, and security teams.

Responsibilities

• Embed security into the full SDLC and drive secure-by-design practices.
• Perform threat modeling, architecture security reviews, and design reviews.
• Conduct secure code reviews (manual and AI-assisted) and advise on remediation.
• Operate and tune SAST/DAST/IAST, SCA, and IaC scanning within CI/CD pipelines.
• Triage, validate, and reduce false positives; track issues to remediation.
• Define and maintain security gates and policy-as-code in CI/CD.
• Secure the software supply chain; manage SBOM, artifact signing, and build hardening.
• Coordinate penetration testing and validate fixes for vulnerabilities.
• Develop AI-assisted automations for AppSec tasks and runbooks.
• Establish security standards, baselines, and governance; enable risk-acceptance processes.

Skills

AppSec lifecycle

Threat modeling

OWASP Top 10

Secure code reviews

CI/CD security

Programming languages

Cloud security

Security tooling

AI-assisted security

Education

Bachelor's degree in CS/Info Security/Engineering

Tools

SAST

DAST

SCA

Secrets scanning

IAST

IaC scanning

Job description

EPAM Systems Inc. seeks a seasoned security engineering professional to embed security across the software development lifecycle, drive threat modeling, and lead secure coding reviews.

You will implement and tune SAST/DAST/IAST, SCA, and IaC scanning within CI/CD, reduce false positives, and coordinate vulnerability remediation with development teams. The role emphasizes AI-assisted security workflows and strategic security governance.