Senior Application Security Engineer

EPAM Systems; Turkey; On-site; TRY 5,973,000 - 8,960,000; Full time

Benefits offered by this job

Private health insurance

Well-being events

Extra leave days

Referral bonuses

Performance reviews

Job summary

EPAM Systems is seeking a Senior Application Security Engineer to reduce security risk across web applications and APIs throughout the software development lifecycle. You will partner with engineering teams to assess application security, perform secure design and code reviews, validate and prioritize findings, and drive remediation to closure.

This role focuses on practical security outcomes: identifying real risk, reducing false positives, and helping teams build and ship secure software

Qualifications

• Hands-on experience in application security or product security.
• Strong knowledge of web application and API security, including OWASP Top 10 and common vulnerability classes.
• Understanding of threat modeling and secure software design principles.
• Strong knowledge of authentication, authorization, session management, input validation, cryptography, secrets handling, and data protection.

Responsibilities

• Perform security assessments of web applications, APIs, services, and supporting components.
• Facilitate threat modeling and review architectures and technical designs from a security perspective.
• Conduct secure code reviews and identify vulnerabilities and insecure implementation patterns.
• Validate findings from automated tools, reduce false positives, and prioritize issues based on exploitability and business impact.
• Provide clear, actionable remediation guidance and secure implementation recommendations.
• Track findings through remediation and retesting in collaboration with development teams.

Skills

Application security

Web security

OWASP Top 10

Threat modeling

Secure design

Authentication

Authorization

Session management

Cryptography

Secrets handling

Data protection

Job description

We are looking for a Senior Application Security Engineer to reduce security risk across web applications and APIs throughout the software development lifecycle. You will partner closely with engineering teams to assess application security, perform secure design and code reviews, validate and prioritize findings, and drive remediation to closure.This role focuses on practical application security outcomes: identifying real risk, reducing false positives, and helping teams build and ship secure software efficiently.ResponsibilitiesPerform security assessments of web applications, APIs, services, and supporting componentsFacilitate threat modeling and review architectures and technical designs from a security perspectiveConduct secure code reviews and identify vulnerabilities and insecure implementation patternsValidate findings from automated tools, reduce false positives, and prioritize issues based on exploitability and business impactProvide clear, actionable remediation guidance and secure implementation recommendationsTrack findings through remediation and retesting in collaboration with development teamsAdvise teams on authentication, authorization, session management, input validation, data protection, cryptography, secrets handling, and API security controlsContribute to secure SDLC practices, security standards, guidelines, and reusable security patternsCommunicate security risks and recommendations to technical and non-technical stakeholdersRequirementsHands-on experience in application security or product securityStrong knowledge of web application and API security, including OWASP Top 10 and common vulnerability classesPractical experience with security assessments, secure design reviews, and/or secure code reviewsUnderstanding of threat modeling and secure software design principlesStrong knowledge of authentication, authorization, session management, input validation, cryptography, secrets handling, and data protectionWe offerCONTINUOUS UPSKILLING, LEARNING & DEVELOPMENTDiversity of tasks and projectsAssessment center for objective review of competency levelPersonal development planMentoring programs and leadership developmentCertification and professional development supportAccess to learning platforms including more than 2,500 internal coursesEnglish courses taught by certified teachersCORPORATE BENEFITSExtra leave daysReferral bonusesCOMPENSATION PACKAGECompetitive compensation paid in USDRegular salary and performance reviewsMEDICAL & HEALTHCAREPrivate health insuranceWell-being eventsWORKING ENVIRONMENTRecreation areas and kitchensTea, coffee and snacksSports equipment and game consolesIT EquipmentMicrosoft’s Software Assurance Home Use Program (HUP)Please note that our Talent Attraction Team reviews applications and CVs submitted in English.EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.