Senior Application Security Engineer (AI Models)
New
E
EPAM SystemsApplication security
Opportunity to work remotely within PolandFull-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Languages
- Excellent command of written and spoken English (B2+ level)
- Experience
- 3+ years of experience in Application Security with a strong application development background
- Required Skills
- PythonAzure DevOps
Requirements
- Degree in Computer Science or Cyber Security.
- 3+ years of experience in Application Security with a strong application development background.
- Hands-on experience with Azure DevOps.
- Prior experience using AI models and Cyber Harness to support security evaluation of applications and software code.
- Familiarity with GitHub, Copilot, and Codex.
- Knowledge of OWASP Top 10 for Agentic AI, AI skills development, and security triage.
- Proficiency in coding with Python, JavaScript, C#, or PowerShell.
- Deep understanding of OWASP, CWE25, Data Protection, Access Management, software vulnerabilities, secure design best practices, and threat modeling.
- CISSP, CSSLP, CEH, OSCP, or similar certification.
- Excellent command of written and spoken English (B2+ level).
- Prior experience in a large organization or Financial Services is nice to have.
- Exposure to secure SDLC program definition across enterprise technology projects is nice to have.
Responsibilities
- Collaborate with software and security engineers to design, maintain, and build product security tools and services.
- Serve as the technical point of contact for product teams on CI/CD automation and Product Application Sec Ops.
- Use approved AI models and Cyber Harness to assess application code for business logic weaknesses, misconfigurations, and vulnerabilities.
- Build and automate scripts that help developers consume security services.
- Own security product QA and testing activities.
- Run software composition analysis (SCA) tools.
- Interpret penetration testing findings and assist software engineering teams with triage and risk mitigation guidance.
- Articulate business risk when assessing software vulnerabilities.
- Continuously improve SAST, DAST, and IaC security tool operations.
- Enhance WAF and IDS operations and expand security tooling in Azure and AWS cloud environments.
View Full Description & ApplyYou'll be redirected to the employer's site
