Senior Application Security Engineer

EPAM Systems; Turkey; On-site; TRY 5,834,000 - 8,751,000; Full time

Benefits offered by this job

Upskilling program

Private health insurance

English courses

Mentoring program

Training resources

Job summary

EPAM Systems is seeking a Senior Application Security Engineer to design, implement, and operate security-tooling integrations across certificate management, secrets management, PAM, and vulnerability detection platforms.

You will collaborate with SOC, IAM, and Network Architecture teams to embed security controls into CI/CD pipelines and infrastructure, ensuring audit, compliance, and governance across the organization.

Qualifications

• 3+ years of experience integrating security-tooling (certificate lifecycle, secrets, PAM).
• Experience with SIEM/SOAR and vulnerability tooling (SAST/DAST/SCA/IAST/ASPM).
• Proficiency in Policy as Code checks (OPA/Conftest, Azure Policy) and CI/CD gates.
• Knowledge of enterprise IAM (Entra ID, AD, RBAC).
• Familiarity with firewall/WAF concepts (Palo Alto, F5, Cloudflare).
• Ability to work in governance-heavy change-control environments.

Responsibilities

• Design and implement security-tool integrations across certs, secrets, and PAM.
• Develop SIEM/WAF alert pipelines and vulnerability dashboards from scanners.
• Embed security controls into CI/CD pipelines and platform infrastructure.
• Collaborate with SOC, IAM, and Network Architecture teams on governance.
• Provide evidence and configuration details during security reviews.

Skills

Security tooling integrations

Certificate management

Secrets management

PAM workflows

SIEM/SOAR

Policy as Code

IAM / Entra ID / RBAC

Firewall/WAF concepts

Governance/change-control

Tools

Venafi

Azure Key Vault

OpenBao

Conftest

OPA

Terraform/OpenTofu

Azure Policy

Palo Alto

F5

Cloudflare

Backstage

Job description

We are looking for a Senior Application Security Engineer to design, implement, and operate security-tooling integrations across certificate management, secrets management, privileged access, and vulnerability detection platforms. In this role, you will work closely with SOC, IAM, and Network Architecture teams to embed security controls into the platform's infrastructure and CI/CD pipelines, ensuring robust audit, compliance, and governance practices across the organization.

Responsibilities

• Implement and operate the certificate-management integration with Venafi: issuance workflows and distribution across F5, Azure Key Vault, and VM/OS certificate stores, including renewal/rotation automation
• Build and maintain the secrets-management integration (OpenBao, Azure Key Vault): configuration-as-code for authentication methods, namespaces, mounts, policies, and dynamic secrets engines (database, cloud)
• Implement the Privileged Access Management (PAM) "break-the-glass" workflow: time-boxed grant requests, approval-chain automation, session recording hooks, and audit-trail logging
• Build SIEM and WAF alert-integration pipelines (alert feed ingestion, entity correlation, severity views) and the Vulnerability Dashboard, integrating findings from SAST/DAST/SCA/IAST/ASPM scanners
• Implement Policy as Code checks (OPA/Conftest, Azure Policy): baseline policy library, CI gate integration, and exemption/waiver workflow automation
• Support the platform's Auth/RBAC configuration from a security-tooling perspective (Entra ID, Active Directory, GPOs, M365 groups), ensuring audit-retention settings are correctly applied
• Work with the Network Architect to translate firewall/WAF policy requirements (PaloAlto, F5, Cloudflare) into the SIEM/WAF alert integration and Vulnerability Dashboard
• Support SOC and IAM teams during security reviews, preparing evidence and configuration details for security-sensitive integrations
• Troubleshoot and remediate security-tooling issues during Implementation and Adoption

Requirements

• 3+ years of experience implementing security-tool integrations: certificate-lifecycle management (Venafi or equivalent), secrets management (OpenBao, Key Vault), and PAM workflows
• Experience with SIEM/SOAR alert pipelines and vulnerability-management tooling (SAST/DAST/SCA/IAST/ASPM)
• Experience implementing Policy as Code checks (OPA/Conftest, Azure Policy) and CI/CD gate enforcement
• Knowledge of enterprise identity and access management (Entra ID, Active Directory, RBAC/claims-based authorization)
• Familiarity with firewall/WAF concepts (PaloAlto, F5, Cloudflare) sufficient to define alerting/finding-correlation requirements
• Ability to work within governance-heavy, security-sensitive change-control processes

Nice to have

• Experience integrating security tooling with a Backstage-based (or comparable) developer portal
• Familiarity with supply-chain security practices (artifact signing/SBOM, e.g., cosign/Sigstore)
• Knowledge of Conditional Access automation (Entra ID/Microsoft Graph API)
• Experience with Infrastructure as Code (Terraform/OpenTofu) for implementing security modules

We offer

• CONTINUOUS UPSKILLING, LEARNING & DEVELOPMENT
  • Diversity of tasks and projects
  • Assessment center for objective review of competency level
  • Personal development plan
  • Mentoring programs and leadership development
  • Certification and professional development support
  • Access to learning platforms including more than 2,500 internal courses
  • English courses taught by certified teachers
• CORPORATE BENEFITS
  • Extra leave days
  • Referral bonuses
• COMPENSATION PACKAGE
  • Competitive compensation paid in USD
  • Regular salary and performance reviews
• MEDICAL & HEALTHCARE
  • Private health insurance
  • Well-being events
• WORKING ENVIRONMENT
  • Recreation areas and kitchens
  • Tea, coffee and snacks
  • Sports equipment and game consoles
  • IT Equipment
  • Microsoft’s Software Assurance Home Use Program (HUP)

Please note that our Talent Attraction Team reviews applications and CVs submitted in English.

EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.