Lead AI Security Engineer
New
E
EPAM SystemsApplication security
Opportunity to work remotely within PolandFull-TimeLead
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Languages
- English B2
- Experience
- Experience participating in at least several production projects or engineering teams
- Required Skills
- CI/CDPrompt Engineering
Requirements
- Bachelor’s degree in Computer Science, Information Security, Engineering, or equivalent practical experience.
- Hands-on application security experience across the software development lifecycle.
- Strong understanding of common application vulnerability classes, the OWASP Top 10, and secure coding principles.
- Practical experience with application security tooling such as SAST, DAST, SCA, and secrets scanning, including CI/CD integration.
- Working knowledge of at least one programming language sufficient to read code and assess vulnerabilities.
- Experience with threat modeling and secure design review methodologies.
- Understanding of DevOps or DevSecOps practices, CI/CD pipelines, and secure-by-design principles.
- Familiarity with cloud application security concepts on at least one major cloud platform, such as Azure, AWS, or GCP.
- Experience participating in at least several production projects or engineering teams.
- Practical understanding of AI-assisted productivity and automation beyond basic chatbot usage, such as building agents, automating tasks, integrating LLMs with tools or workflows, or using structured prompting.
- Ability to work with developers, architects, QA engineers, DevOps, product, and security teams, and to influence without owning the codebase.
- Ability to follow, maintain, and improve defined security processes.
- Ability to explain security risks, technical decisions, and remediation plans to technical and non-technical stakeholders.
- Experience with application security platforms, software supply chain security, IaC or policy-as-code tools, container or Kubernetes security, API security, secrets management, or microservice security is a plus.
- Experience with AI/LLM platforms or frameworks and understanding of AI application security risks are a plus.
Responsibilities
- Embed security into the software development lifecycle and promote shift-left and secure-by-design practices.
- Perform threat modeling, architecture security reviews, and design reviews for applications, services, and APIs.
- Conduct manual and AI-assisted secure code reviews and advise developers on secure coding and remediation.
- Implement and operate application security tooling, including SAST, DAST, IAST, SCA, secrets scanning, and IaC scanning, in CI/CD pipelines.
- Triage, validate, prioritize, and track security findings through remediation with development teams.
- Define and maintain CI/CD security gates, application security standards, baselines, and policy-as-code.
- Secure software supply chains through dependency and open-source risk management, SBOM generation, artifact integrity, and build pipeline hardening.
- Build and integrate AI agents and LLM-backed automations into AppSec workflows and SDLC pipelines.
- Implement controls for AI-assisted AppSec workflows and AI-powered application features, including validation, guardrails, access controls, and auditability.
- Establish a security champions program and deliver secure-coding training, guidelines, and reusable security patterns.
View Full Description & ApplyYou'll be redirected to the employer's site
