Senior Security Engineer (m/f/d)

EPAM Systems; Germany (OH); Hybrid; USD 81,178 - 104,372; Full time

Job summary

EPAM Systems is looking for a Senior Security Engineer (m/f/d) to work in a hybrid mode, primarily in Germany. The candidate will contribute to building security solutions that enhance the security posture of open-source software, utilizing DevSecOps and automation.

This role involves collaborating with cross-functional teams to enhance CI/CD security, requiring a background in security engineering and vulnerability management. Strong communication and problem-solving skills are essential.

Qualifications

• Strong background in security engineering, DevSecOps orchestration, and security‑as‑code.
• Hands-on experience securing CI/CD pipelines with GitHub Actions or similar tools.
• Excellent collaboration, communication, and problem‑solving skills.

Responsibilities

• Contribute to the design and enhancement of solutions for open‑source vulnerability monitoring.
• Integrate and improve security controls in CI/CD pipelines using automation tools.
• Collaborate with cross‑functional teams to ensure stability and compliance.

Skills

Security engineering

DevSecOps orchestration

Vulnerability management

Automation tools

Collaboration

Problem-solving

Tools

GitHub Actions

Job description

Senior Security Engineer (m/f/d)

Germany, hybrid working mode. In this role you will build security solutions that help organizations monitor, assess, and improve the security posture of open‑source software. You will work on a platform that provides unified visibility into open‑source vulnerabilities and delivers security ratings for open‑source libraries, enabling risk‑based decision making for development teams. The role combines expertise in DevSecOps, vulnerability management, and automation to design, implement and iterate security solutions integrated into modern development workflows, and you will collaborate with engineers across disciplines to deliver scalable, secure, and efficient security products.

Responsibilities

• Contribute to the design and enhancement of solutions for open‑source vulnerability monitoring and security ratings.
• Integrate and improve security controls in CI/CD pipelines using GitHub Actions and other automation tools.
• Apply DevSecOps principles and secure software development practices across the engineering lifecycle.
• Collaborate with cross‑functional teams to ensure stability, scalability, and compliance of delivered solutions.
• Share knowledge, drive continuous improvement, and uphold secure engineering effectiveness within the team.

Requirements

• Strong background in security engineering, DevSecOps orchestration, and security‑as‑code.
• Knowledge of open‑source security concepts, including Software Composition Analysis and license compliance.
• Understanding of vulnerability management processes, CVSS scoring, and remediation strategies.
• Hands‑on experience securing CI/CD pipelines with GitHub Actions or similar tools.
• Familiarity with common security standards, secure SDLC, and open‑source security frameworks.
• Excellent collaboration, communication, and problem‑solving skills.

Nice to Have

• Knowledge of OSS security monitoring platforms and compliance tools.
• Experience creating security automation scripts and workflows.
• Familiarity with integrating security gates into build/test pipelines.
• Background in continuous improvement practices for security, risk mitigation, and compliance auditing.