Senior SecOps Engineer

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.

• 5+ years of experience in security engineering with background in DevSecOps practices, Secure Software Development Life Cycle, and security-as-code approaches
• Understanding of Software Composition Analysis, open-source vulnerability management, and OSS license compliance
• Knowledge of CVSS scoring, exploitability assessment, vulnerability prioritization, and remediation strategies
• Proficiency in GitHub Actions, CI/CD pipelines, and integration of security checks or quality gates into delivery workflows
• Understanding of open-source security principles, vulnerability management practices, and relevant security guidelines
• Strong communication skills, ownership mindset, and ability to work effectively as part of a cross-functional team

• Support the development and enhancement of solutions for open-source vulnerability monitoring and security rating
• Contribute to the improvement of CI/CD pipelines and GitHub Actions-based workflows
• Apply DevSecOps and secure engineering practices across the software delivery lifecycle
• Collaborate with engineers, security specialists, product stakeholders, and other team members to deliver reliable and secure solutions
• Analyze, prioritize, and address security-related topics connected to open-source components and dependencies
• Share knowledge and support team activities to drive continuous improvement of product quality and engineering practices