Senior SecOps Engineer - SBOM & CI/CD Security Leader

EPAM Systems; Polska; Híbrido; PLN 180 000 - 280 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid by design

Remote within Poland

Work abroad up to 60 days annually

Relocation opportunities

Health insurance

Multisport

Shopping vouchers

Employee stock purchase plan 15% off

Resumo da oferta

EPAM Systems in Poland is seeking a Senior SecOps Engineer with strong expertise in software supply chain security to enhance our security posture around SBOM and related tooling. You will define security requirements, evaluate solutions, and enable the engineering teams through best practices and training.

The role focuses on SBOM frameworks (SPDX, CycloneDX), SCA/SAST tooling, and CI/CD security automation to scale secure development.

Qualificações

• 5+ years in SecOps/DevSecOps or security engineering.
• Deep SBOM framework knowledge (SPDX, CycloneDX).
• Hands-on security tooling experience (SCA/SAST, container security).

Responsabilidades

• Assess SBOM and compliance landscape aligning with best practices and regulatory requirements.
• Assess and select tools for SBOM generation, vulnerability detection, and supply chain risk management.
• Architect, integrate, and optimize security solutions within CI/CD pipelines.
• Lead training and mentoring to drive adoption of security tools and security‑minded culture.
• Define security requirements and strategies for supply chain risk management.
• Evaluate complex security challenges and define pragmatic, high‑impact solutions.
• Design scalable security solutions balancing risk with engineering efficiency.

Conhecimentos

SecOps/DevSecOps

SBOM security

CI/CD security automation

SCA tooling

SAST tooling

Container security

Ferramentas

SPDX

CycloneDX

Descrição da oferta de emprego

EPAM Systems in Poland is seeking a Senior SecOps Engineer with strong expertise in software supply chain security to enhance our security posture around SBOM and related tooling. You will define security requirements, evaluate solutions, and enable the engineering teams through best practices and training.

The role focuses on SBOM frameworks (SPDX, CycloneDX), SCA/SAST tooling, and CI/CD security automation to scale secure development.