Lead Product Owner

EPAM Systems Inc; United States; Remote; USD 120,000 - 170,000; Full time

Job summary

EPAM Systems Inc. is seeking a Lead Product Owner to drive end-to-end delivery of security vulnerability remediation across a web application ecosystem.

You will align stakeholders, translate security findings into actionable backlog items, and ensure timely validation and release. You will own and prioritize the remediation backlog, coordinate delivery across engineering, QA, security, and business stakeholders, and drive vulnerabilities through analysis, remediation, testing, and release.

Qualifications

• 5+ years of experience as a Product Owner or Business Analyst.
• Experience in backlog management, prioritization, and delivery planning.
• Strong leadership skills coordinating engineering, QA, security, and business stakeholders.
• Strong project management skills with dependency, risk, and commitment tracking.
• Solid technical knowledge of web application security, OWASP risks, and remediation workflows.
• Hands-on familiarity with SAST/SCA/DAST tools such as Veracode or similar.
• Proficiency with Jira and Confluence for requirements, planning, and status reporting.
• Strong analytical skills to translate findings into requirements and acceptance criteria.
• Strong communication skills for clear status updates and proactive escalation.
• Knowledge of GenAI for BA Productivity & SDLC, Product Management, Project Management, and Stakeholder Management.
• Upper-Intermediate English (B2) proficiency.
• Nice to have Agile and Scrum facilitation experience.
• Understanding of common security vulnerabilities and remediation best practices.

Responsibilities

• Own and prioritize the security vulnerability remediation backlog.
• Coordinate remediation delivery across engineering, QA, security, and business stakeholders.
• Translate security findings into clear requirements, backlog items, and acceptance criteria.
• Drive vulnerabilities through analysis, remediation, testing, validation, release, and closure.
• Prioritize work by severity, business risk, deadlines, and technical dependencies.
• Track progress, risks, blockers, dependencies, and remediation commitments.
• Coordinate validation of findings from Veracode or similar SAST/SCA/DAST tools.
• Facilitate planning and Agile ceremonies to ensure delivery commitments are met.
• Coordinate release planning and regression and security validation.
• Maintain clear status reporting and escalation of critical risks or delays.
• Support AI-assisted practices to improve analysis, remediation, testing, and team productivity.

Skills

Backlog management

Leadership

Stakeholder coordination

Agile delivery planning

Jira/Confluence

Security domain knowledge

Veracode/SAST/DAST tooling

Requirements translation

Communication

GenAI awareness

Education

5+ years Product Owner/BA

Tools

Veracode

Jira

Confluence

Job description

We are looking for a Lead Product Owner to drive end-to-end delivery of security vulnerability remediation across a web application ecosystem. You will align stakeholders, translate security findings into actionable backlog items, and ensure timely validation and release.

Responsibilities

• Own and prioritize the security vulnerability remediation backlog
• Coordinate remediation delivery across engineering, QA, security, and business stakeholders
• Translate security findings into clear requirements, backlog items, and acceptance criteria
• Drive vulnerabilities through analysis, remediation, testing, validation, release, and closure
• Prioritize work by severity, business risk, deadlines, and technical dependencies
• Track progress, risks, blockers, dependencies, and remediation commitments
• Coordinate validation of findings from Veracode or similar SAST/SCA/DAST tools
• Facilitate planning and Agile ceremonies to ensure delivery commitments are met
• Coordinate release planning and regression and security validation
• Maintain clear status reporting and escalation critical risks or delays
• Support AI-assisted practices to improve analysis, remediation, testing, and team productivity

Requirements

• 5+ years of experience as a Product Owner or Business Analyst
• Experience in backlog management, prioritization, and delivery planning
• Strong leadership skills coordinating engineering, QA, security, and business stakeholders
• Strong project management skills with dependency, risk, and commitment tracking
• Solid technical knowledge of web application security, OWASP risks, and remediation workflowsHands-on familiarity with SAST/SCA/DAST tools such as Veracode or similar
• Proficiency with Jira and Confluence for requirements, planning, and status reporting
• Strong analytical skills to translate findings into requirements and acceptance criteria
• Strong communication skills for clear status updates and proactive escalation
• Knowledge of GenAI for BA Productivity & SDLC, Product Management, Project Management, Project Team Management, and Stakeholder Management
• Upper-Intermediate English (B2) proficiency
• Nice to have Agile and Scrum facilitation experience
• Understanding of common security vulnerabilities and remediation best practices