Lead AI Security Engineer: Secure SDLC & AI-Driven Apps

EPAM Systems; Turkey; On-site; TRY 900,000 - 1,300,000; Full time

Benefits offered by this job

Private health insurance

Extra leave days

Referral bonuses

Well-being events

Job summary

EPAM Systems seeks a Lead AI Security Engineer to secure software across the full development lifecycle, embedding security into design, code, build, and release. You will drive remediation with engineering teams and apply AI to accelerate AppSec work and secure AI/LLM-powered apps.

You will lead threat modeling, secure design reviews, and secure coding practices, while configuring and operating SAST/DAST/IAST, SCA, and secrets scanning in CI/CD pipelines.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent practical experience.
• Hands-on application security experience across the software development lifecycle.
• Understanding of OWASP Top 10 and secure coding principles.
• Experience with SAST/DAST/SCA and integrating into CI/CD.

Responsibilities

• Embed security into the full software development lifecycle and drive shift-left practices.
• Perform threat modeling, architecture reviews, and design reviews for apps and APIs.
• Conduct secure code reviews (manual and AI-assisted) and advise on remediation.
• Implement and operate SAST/DAST/IAST, SCA, secrets scanning, and IaC scanning in CI/CD.
• Triage findings, reduce false positives, and track remediation with developers.
• Define security gates and policies in CI/CD pipelines and balance risk with velocity.
• Secure the software supply chain, SBOM generation, signing, and build hardening.
• Drive AI-assisted automations for AppSec tasks and secure AI usage controls.

Skills

Threat modeling

AppSec

CI/CD security

Security reviews

AI-assisted tooling

Communication

Python/Java/C#

Education

Bachelor's degree in CS/InfoSec/Engineering

Tools

SAST

DAST

SCA

SBOM

Sigstore

IaC scanners

Burp Suite

Job description

EPAM Systems seeks a Lead AI Security Engineer to secure software across the full development lifecycle, embedding security into design, code, build, and release. You will drive remediation with engineering teams and apply AI to accelerate AppSec work and secure AI/LLM-powered apps.

You will lead threat modeling, secure design reviews, and secure coding practices, while configuring and operating SAST/DAST/IAST, SCA, and secrets scanning in CI/CD pipelines.