AI-Driven Application Security Architect

EPAM Systems; United States; Remote; USD 130,000 - 190,000; Full time

Job summary

EPAM Systems Inc. seeks an experienced Application Security Architect to design robust security architectures for enterprise apps while leveraging AI-assisted tools to enhance security practices.

You will collaborate across engineering, DevOps, cloud and compliance teams to embed security throughout the SDLC. Responsibilities include architecture reviews, threat modeling, secure design assessments, and implementing controls across APIs, microservices and cloud-native environments.

Qualifications

• Bachelor's degree in CS, cybersecurity, engineering, or equivalent.
• 5+ years in information security with focus on application security.
• Experience delivering app security architecture and DevSecOps integration.
• Knowledge of OWASP Top 10 and secure coding practices.
• Ability to review code in Python/Java/C# or JavaScript/TypeScript.

Responsibilities

• Design and implement security architectures for enterprise applications, APIs, microservices and cloud-native apps.
• Lead threat modeling and secure design assessments.
• Define and improve app security capabilities (authn, authz, API security, encryption).
• Support SSDLC and DevSecOps integration across engineering teams.
• Evaluate and improve SAST, DAST, SCA and secrets scanning processes.
• Communicate risks and remediation plans to stakeholders.

Skills

Application security

Threat modeling

Secure SDLC

DevSecOps

Vulnerability analysis

Cloud security

Python/Java/C#

Communication

Education

Bachelor's degree or equivalent

Tools

SAST

DAST

SCA

Secrets scanning

Vulnerability management

Job description

EPAM Systems Inc. seeks an experienced Application Security Architect to design robust security architectures for enterprise apps while leveraging AI-assisted tools to enhance security practices.

You will collaborate across engineering, DevOps, cloud and compliance teams to embed security throughout the SDLC. Responsibilities include architecture reviews, threat modeling, secure design assessments, and implementing controls across APIs, microservices and cloud-native environments.