Lead AppSec & Vulnerability Remediation

EPAM Systems, Inc.; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

LinkedIn Learning access

Global career opportunities

Job summary

EPAM Systems, Inc. is seeking a Lead Application Security Engineer to own the HackerOne vulnerability program and end-to-end remediation across Cybersecurity, Engineering, Product, and vendors.

You will reproduce findings, validate impact, and drive risk-based prioritization using Postman and security tooling. You will coordinate across multiple teams, provide executive reporting, and ensure timely remediation while leveraging GenAI automation to enhance triage and tracking.

Qualifications

• 5+ years of experience in Software Engineering or Application Security.
• Strong understanding of REST APIs, GraphQL, OAuth, JWT, and API Security.
• Experience reproducing security findings and communicating risk to stakeholders.

Responsibilities

• Lead the HackerOne program across teams from intake to closure.
• Coordinate remediation work and track progress with Jira and ServiceNow.
• Provide executive-ready reporting on backlog trends, SLA compliance, and risk reduction.
• Present status to cybersecurity and engineering leadership; drive remediation progress.

Tools

Postman

Jira

ServiceNow

Burp Suite

GenAI automation

Job description

EPAM Systems, Inc. is seeking a Lead Application Security Engineer to own the HackerOne vulnerability program and end-to-end remediation across Cybersecurity, Engineering, Product, and vendors.

You will reproduce findings, validate impact, and drive risk-based prioritization using Postman and security tooling. You will coordinate across multiple teams, provide executive reporting, and ensure timely remediation while leveraging GenAI automation to enhance triage and tracking.