Lead Container & Cloud Security Engineer

EPAM Systems; United States; Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

Career opportunities

Training and certifications

Job summary

EPAM Systems, Inc. is seeking a Lead-level Security Engineer in the United States to strengthen container and supply chain security through automation and hands-on remediation.

You will harden container images, secure Kubernetes workloads, and build tooling that turns scan results into tested fixes. You will own security tooling, implement runtime controls, and triage vulnerabilities across SAST, DAST, and SCA while partnering with engineering teams to drive remediation and upgrades.

Qualifications

• 5+ years of security engineering experience in DevSecOps and security automation.
• Proven project ownership to write, test, and commit patches rather than only filing tickets.
• Advanced Go (Golang) skills to build security tooling, CLIs, and services.

Responsibilities

• Build and maintain hardened container base images with automated testing for development and production use.
• Implement Kubernetes security controls including runtime monitoring, network policies, and admission policies.
• Secure software supply chain workflows across build pipelines, registries, and infrastructure configuration.
• Create and evolve security automation tools and services using Go.
• Triage vulnerabilities from pentests, SAST, DAST, and SCA to separate real risk from noise.
• Partner with engineering teams to prioritize findings and commit remediation patches.

Skills

Go (Golang)

Kubernetes security

Container security

AWS security

CI/CD security

SAST/DAST/SCA

Terraform

Gen AI assisted development

English communication

Tools

Terraform

Cosign

Sigstore

Job description

EPAM Systems, Inc. is seeking a Lead-level Security Engineer in the United States to strengthen container and supply chain security through automation and hands-on remediation.

You will harden container images, secure Kubernetes workloads, and build tooling that turns scan results into tested fixes. You will own security tooling, implement runtime controls, and triage vulnerabilities across SAST, DAST, and SCA while partnering with engineering teams to drive remediation and upgrades.