Senior Security Operations Engineer

EPAM Systems; Georgia; On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Global mobility (work abroad up to two

Relocation options to 55+ countries

Corporate and social events

Free English classes with certified Q

Job summary

EPAM Systems is seeking a Senior Security Operations Engineer to join a team building security solutions that monitor, assess, and improve the security posture of open-source software. The role supports ongoing development, CI/CD improvements, and secure engineering practices across the software delivery lifecycle.

You will work with engineers, security specialists, and product stakeholders to deliver reliable, scalable solutions.

Qualifications

• Background in DevSecOps practices, SSDLC, and security-as-code approaches.
• Understanding of Software Composition Analysis, open-source vulnerability management, and OSS license compliance.
• Knowledge of CVSS scoring, exploitability assessment, and vulnerability prioritization/remediation strategies.
• Hands-on experience with GitHub Actions, CI/CD pipelines, and security checks integrated into delivery workflows.
• Familiarity with open-source security principles and vulnerability management practices.
• Strong communication, ownership mindset, and ability to work in a cross-functional team.
• English proficiency at Upper-Intermediate level (B2+) or higher.

Responsibilities

• Support the team in developing and enhancing open-source vulnerability monitoring solutions.
• Contribute to CI/CD and GitHub Actions-based workflows.
• Apply DevSecOps practices across the software delivery lifecycle.
• Collaborate with engineers, security specialists, product stakeholders, and teammates.
• Help analyze and address security topics related to open-source components.
• Share knowledge and contribute to continuous product and engineering improvement.

Skills

DevSecOps

SSDLC

Security-as-code

OSS security

CVSS

GitHub Actions

CI/CD pipelines

Security checks

Cross-functional teamwork

English (B2)

Job description

We are looking for a Senior Security Operations Engineer to join and support a team building security solutions that help organizations monitor, assess, and improve the security posture of open-source software.

The team works on a platform that provides unified visibility into open-source vulnerabilities, as well as a solution that delivers security ratings for open-source libraries. These capabilities help development teams make better risk-based decisions and improve the overall security of the software delivery lifecycle.

The person in this role will work closely with the existing team, support ongoing development activities, contribute to CI/CD and DevSecOps improvements, and help ensure that the delivered solutions are scalable, reliable, and secure.

Experience the freedom of remote work from anywhere in Georgia, whether from the comfort of your home, our modern offices in Tbilisi and Batumi or a coworking space in Kutaisi.

Responsibilities

• Support the team in the development and enhancement of solutions for open-source vulnerability monitoring and security rating
• Contribute to improving CI/CD pipelines and GitHub Actions-based workflows
• Apply DevSecOps and secure engineering practices across the software delivery lifecycle
• Collaborate with engineers, security specialists, product stakeholders, and other team members to deliver reliable and secure solutions
• Help analyze, prioritize, and address security-related topics connected to open-source components and dependencies
• Share knowledge, support team activities, and contribute to continuous improvement of product quality and engineering practices

Requirements

• Background in DevSecOps practices, Secure Software Development Life Cycle (SSDLC), and security-as-code approaches, with 3+ years of relevant experience
• Understanding of Software Composition Analysis, open-source vulnerability management, and OSS license compliance
• Knowledge of CVSS scoring, exploitability assessment, and vulnerability prioritization and remediation strategies
• Hands-on experience with GitHub Actions, CI/CD pipelines, and integration of security checks or quality gates into delivery workflows
• Familiarity with open-source security principles, vulnerability management practices, and relevant security guidelines
• Strong communication skills, ownership mindset, and ability to work effectively as part of a cross-functional team
• Proficiency in English at an Upper-Intermediate level (B2) or higher

We offer

• We connect like-minded people
  • Delivering innovative solutions to industry leaders, making a global impact
  • Enjoyable working environment, whether it is the vibrant office or the comfort of your own home
  • Opportunity to work abroad for up to two months per year
  • Relocation opportunities within our offices in 55+ countries
  • Corporate and social events
• We invest in your growth
  • Leadership development, career advising, soft skills and well-being programs
  • Certifications, including GCP, Azure and AWS
  • Unlimited access to EPAM's internal learning database
  • Free English classes with certified teachers
• We cover it all
  • Participation in the Employee Stock Purchase Plan
  • Monetary bonuses for engaging in the referral program
  • Comprehensive medical & family care package
  • Five trust days per year (sick leave without a medical certificate)
  • Benefits package (sports activities, a variety of stores and services)

EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.