Senior Security Engineer: Vulnerability & Patch Lead

EPAM Systems Inc; United States; Hybrid; USD 100,000 - 140,000; Full time

Job summary

EPAM Systems Inc is seeking an experienced IT Infrastructure Security Engineer to lead vulnerability management and endpoint compliance across a complex European hybrid IT estate, ensuring security posture, continuous risk visibility, and timely remediation.

Responsibilities include driving vulnerability management with Tenable WAS, SAST/SCA consultancy, operating Tanium with Comply and Patch, and delivering security milestones.

Qualifications

• 3+ years of security engineering or security operations experience.
• Proficient with Vulnerability Management tooling (Tenable, Qualys, or equivalent).
• Familiarity with endpoint visibility and patch management frameworks (Tanium or equivalent).
• Understanding of ITIL foundations (incident and change management).
• Understanding of SAST/SCA.
• English level of minimum B2 (Upper-Intermediate) for effective communication.

Responsibilities

• Drive vulnerability management initiatives using Tenable WAS and provide SAST/SCA consultancy across applications and infrastructure.
• Operate and administer Tanium modules (Comply, Patch) to ensure high visibility, asset control, and continuous risk remediation.
• Execute day-to-day BAU maintenance and build tasks.
• Deliver project-based security milestones and integrations.
• Act as backup for general Tenable vulnerability management and low-level Tanium extensions (Index, Recorder).

Skills

Security engineer

Vulnerability management

Endpoint visibility

ITIL foundations

SAST/SCA

English B2

Tools

Tenable

Qualys

Tanium

Job description

EPAM Systems Inc is seeking an experienced IT Infrastructure Security Engineer to lead vulnerability management and endpoint compliance across a complex European hybrid IT estate, ensuring security posture, continuous risk visibility, and timely remediation.

Responsibilities include driving vulnerability management with Tenable WAS, SAST/SCA consultancy, operating Tanium with Comply and Patch, and delivering security milestones.