Senior Security Engineer

EPAM Systems, Inc.; United States; Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

Career opportunities

Training and certifications

Job summary

EPAM Systems, Inc. is seeking a Lead-level Security Engineer in the United States to strengthen container and supply chain security through automation and hands-on remediation.

You will harden container images, secure Kubernetes workloads, and build tooling that turns scan results into tested fixes. You will own security tooling, implement runtime controls, and triage vulnerabilities across SAST, DAST, and SCA while partnering with engineering teams to drive remediation and upgrades.

Qualifications

• 5+ years of security engineering experience in DevSecOps and security automation.
• Proven project ownership to write, test, and commit patches rather than only filing tickets.
• Advanced Go (Golang) skills to build security tooling, CLIs, and services.

Responsibilities

• Build and maintain hardened container base images with automated testing for development and production use.
• Implement Kubernetes security controls including runtime monitoring, network policies, and admission policies.
• Secure software supply chain workflows across build pipelines, registries, and infrastructure configuration.
• Create and evolve security automation tools and services using Go.
• Triage vulnerabilities from pentests, SAST, DAST, and SCA to separate real risk from noise.
• Partner with engineering teams to prioritize findings and commit remediation patches.

Skills

Go (Golang)

Kubernetes security

Container security

AWS security

CI/CD security

SAST/DAST/SCA

Terraform

Gen AI assisted development

English communication

Tools

Terraform

Cosign

Sigstore

Job description

We are looking for a Lead-level Security Engineer to strengthen container and supply chain security through automation and hands-on remediation. You will harden container images, secure Kubernetes workloads, and build tooling that turns scan results into tested fixes.ResponsibilitiesBuild and maintain hardened container base images with automated testing for development and production useImplement Kubernetes security controls including runtime monitoring, network policies, and admission policiesSecure software supply chain workflows across build pipelines, registries, and infrastructure configurationCreate and evolve security automation tools and services using GoTriage vulnerabilities from pentests, SAST, DAST, and SCA to separate real risk from noisePartner with engineering teams to prioritize findings and commit remediation patches and dependency upgradesAutomate alert grouping and first-pass fix drafting using Gen AI assisted development and MCP-based integrationsRequirements5+ years of security engineering experience in DevSecOps and security automationStrong leadership skills to partner with engineering teams and drive remediation work to completionProven project ownership to write, test, and commit patches rather than only filing ticketsAdvanced Go (Golang) skills to build security tooling, CLIs, and servicesStrong AWS security knowledge including IAM and container services such as EKS and ECSSolid CI/CD pipeline experience with automated testing and security checksDeep container security expertise including hardened base images and attack surface reductionHands-on Kubernetes security skills including network policies, runtime controls, and admission policiesStrong vulnerability management skills across SAST, DAST, SCA, and pentest findingsPractical infrastructure-as-code skills with Terraform for secure configurationsApplied Gen AI assisted development skills with disciplined review and testing of generated codeUpper-Intermediate English skills (B2) for clear written and verbal collaborationNice to haveModel Context Protocol (MCP) integration experience for security automationMicrosoft Azure experience securing container platforms such as AKSNode.js development experience supporting security toolingSupply chain security expertise with SLSA, in-toto, Sigstore/Cosign, and SBOMsWe offerInternational projects with top brandsWork with global teams of highly skilled, diverse peersHealthcare benefitsEmployee financial programsPaid time off and sick leaveUpskilling, reskilling and certification coursesUnlimited access to the LinkedIn Learning library and 22,000+ coursesGlobal career opportunitiesVolunteer and community involvement opportunitiesEPAM Employee GroupsAward-winning culture recognized by Glassdoor, Newsweek and LinkedIn