Security Engineer (DevSecOps)

EPAM Systems; Göteborgs kommun; On-site; SEK 700,000 - 900,000; Full time

Benefits offered by this job

ESPP

Pension plan

Private healthcare

Life insurance

Gym discounts

Wellness grant

Learning and development

Job summary

EPAM Systems in Göteborg seeks a DevSecOps engineer to blend development with information security, guiding security practices across CI/CD and DevOps. You will collaborate with engineering, DevOps, and risk teams to make secure ways of working the default, securing AI, cloud platforms, and enterprise-scale systems.

The role emphasizes security tooling, automation, and policy development within a modern SDLC, with opportunities to influence security posture across projects in a dynamic client

Qualifications

• 3+ years of experience in information security.
• 3+ years of security testing (SAST, SCA, DAST, container security) with Fortify/WebInspect/Prisma Cloud family.
• 3+ years of embedding security into CI/CD pipelines.
• 3+ years of experience with agile methodologies and DevSecOps.
• 2+ years securing containerized environments (Docker, Kubernetes) and VMs.
• 2+ years with Azure, Azure DevOps and GitHub.
• Scripting skills and strong communication are essential.

Responsibilities

• Provide security expertise and guidance to DevSecOps and enablement teams.
• Define and document security processes and create hardening guides and policies.
• Document and drive adoption of secure engineering best practices.
• Develop and evolve information security policies.
• Integrate, configure and manage security tools to support DevSecOps.
• Develop scripts to automate security processes.
• Establish mechanisms and tools for security automation within the SDLC.
• Document the use of security tools and processes.

Skills

CI/CD security integration

DevSecOps

Agile methodologies

Automation scripting

Security monitoring

Communication skills

Tools

Fortify

WebInspect

Fortify SSC

Nexus IQ

Prisma Cloud

Docker

Kubernetes

Azure

Azure DevOps

GitHub

Terraform

Ansible

SAST

SCA

DAST

Job description

EPAM's security consulting team in Göteborg is expanding to meet a broad range of security challenges for enterprise clients, from securing AI and cloud platforms to DevSecOps. Security only holds when it is part of how software is built, not a check added at the end. This role in Göteborg sits where development and information security meet. You work across engineering, DevOps, infrastructure, risk and compliance teams to make secure ways of working the default. Clients can adopt new technology with confidence only when the platforms underneath it are secure.ResponsibilitiesProvide security expertise and guidance to DevSecOps and enablement teamsDefine and document security processes and create hardening guides and policiesDocument and drive the adoption of secure engineering best practicesDevelop and evolve information security policiesIntegrate, configure and manage security tools to support DevSecOps ways of workingDevelop scripts to automate security processesEstablish mechanisms and tools for security automation within the software development lifecycle (SDLC)Document the use of security tools and processesRequirements3+ years of experience in information security3+ years of experience performing security testing (SAST, SCA, DAST and container security), preferably with Fortify, WebInspect, Fortify SSC, Sonatype Nexus IQ and Prisma Cloud3+ years of experience embedding security into CI/CD pipelines3+ years of experience with agile methodologies3+ years of experience in DevSecOps2+ years of experience securing containerized environments (Docker, Kubernetes) and virtual machines2+ years of experience with Azure2+ years of experience with Azure DevOps and GitHubScripting skillsGood communication skillsNice to have2+ years of experience securing infrastructure in Azure (preferred) or AWS via automation2+ years of experience in vulnerability management, risk management or similar3+ years as a developerExperience implementing security monitoring, logging and alertingExperience with Terraform and AnsibleWe offerEPAM Employee Stock Purchase Plan (ESPP)Company’s pension planPrivate healthcare insuranceSafety & life insuranceGym discountsWellness Grant (SEK 2000)Corporate Programs including Employee Referral Program with rewardsLearning and development opportunities including in-house training and coaching, professional certifications, and courses