Senior Application Security Engineer (Hybrid/Remote Poland)

EPAM Systems; Polska; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Health insurance

Multisport card

Shopping vouchers

Referral bonuses

Free snacks

Job summary

EPAM Systems in Poland is seeking a Senior Application Security Engineer to reduce security risk across web applications and APIs throughout the software development lifecycle. You will partner closely with engineering teams to assess application security, perform secure design and code reviews, validate and prioritize findings, and drive remediation to closure.

This role focuses on practical application security outcomes: identifying real risk, reducing false positives, and helping teams build

Qualifications

• Hands-on experience in application security or product security.
• Strong knowledge of web application and API security, including OWASP Top 10.
• Practical experience with security assessments and secure design reviews.
• Understanding of threat modeling and secure software design principles.

Responsibilities

• Perform security assessments of web applications and APIs across the SDLC.
• Conduct threat modeling and review architectures from a security perspective.
• Conduct secure code reviews and identify vulnerabilities.
• Validate findings and prioritize issues based on exploitability and business impact.
• Provide remediation guidance and secure implementation recommendations.
• Track findings through remediation and retesting with development teams.

Skills

Application security

OWASP Top 10

Threat modeling

Secure code reviews

Authentication & authorization

Session management

Data protection

Cryptography

Secure SDLC

English (B2+)

Job description

EPAM Systems in Poland is seeking a Senior Application Security Engineer to reduce security risk across web applications and APIs throughout the software development lifecycle. You will partner closely with engineering teams to assess application security, perform secure design and code reviews, validate and prioritize findings, and drive remediation to closure.

This role focuses on practical application security outcomes: identifying real risk, reducing false positives, and helping teams build