Senior AI Security Engineer: Unified SecOps & Benchmarking

EPAM Systems; Poland; Hybrid; PLN 180,000 - 300,000; Full time

Benefits offered by this job

Hybrid work design

Work remotely within Poland

Opportunity to work abroad up to 60 14

Relocation opportunities

Stock Purchase Plan with 15% discount

Health insurance

Multisport

Shopping vouchers

English classes

Career development programs

Job summary

EPAM Systems is building a unified, scalable AI security testing platform within the Hyperspace ecosystem. We aim to route requests to the right security service via an intelligent agent, evaluate cost-effective open-weight LLMs, and benchmark AI security tools across the SDLC using MCP and agentic methods.

The team collaborates with developers and AppSec to simplify workflows, perform dynamic/static testing, and address OWASP Top 10 vulnerabilities across Web apps, MCP, and LLM domains.

Qualifications

• 5+ years of security engineering and development experience.
• Knowledge of AI security concepts (MCP, LLM, and RAG) and related testing methods.
• Experience with dynamic and static testing and OWASP Top 10 across Web, MCP, LLM.
• English proficiency at B2 level or higher.

Responsibilities

• Design and implement a unified AI security testing and benchmarking platform.
• Build an intelligent agent capable of routing requests to the appropriate security service.
• Evaluate cost-effective open-weight LLMs for security use cases.
• Benchmark various AI security tools to assess performance and effectiveness.
• Connect security capabilities across the SDLC using MCP and agentic approaches.
• Collaborate with developers and AppSec teams to simplify security workflows.
• Conduct dynamic and static testing to identify vulnerabilities.
• Apply application security fundamentals to address OWASP Top 10 vulnerabilities.

Skills

Security engineering

AI security concepts

Dynamic testing

Static testing

OWASP Top 10

English proficiency

Job description

EPAM Systems is building a unified, scalable AI security testing platform within the Hyperspace ecosystem. We aim to route requests to the right security service via an intelligent agent, evaluate cost-effective open-weight LLMs, and benchmark AI security tools across the SDLC using MCP and agentic methods.

The team collaborates with developers and AppSec to simplify workflows, perform dynamic/static testing, and address OWASP Top 10 vulnerabilities across Web apps, MCP, and LLM domains.