Senior DevSecOps / Platform Security Engineer - GenAI Delivery

We are looking for an experienced Senior DevSecOps / Platform Security Engineer to join a large GenAI delivery program in the Healthcare/Life Sciences domain. The role focuses on building secure CI/CD pipelines, container security, software supply chain security, and AWS platform security to enable development teams to deliver secure applications.

• 5+ years of experience in DevSecOps, Platform Security, or Cloud Security
• Strong experience with Jenkins CI/CD pipelines
• Proficiency in Python and/or Node.js
• Hands-on experience with Docker and container security
• Strong knowledge of AWS security services, including IAM, Secrets Manager, and Parameter Store
• Experience with secret management and security scanning tools
• Knowledge of SAST, SCA, IaC, and container vulnerability scanning
• Understanding of software supply chain security and dependency management
• Understanding of TLS/SSL and PKI concepts
• Experience using AI coding assistants such as Claude Code, Codex, or similar is a plus

Nice to have:

• Background in Healthcare, Life Sciences, or other regulated environments
• Exposure to GenAI/LLM platforms such as Amazon Bedrock
• Knowledge of application security, Kubernetes, Helm, Bitbucket, and artifact repositories

• Build and maintain secure CI/CD pipelines using Jenkins
• Implement secret scanning and secure secrets management
• Develop secure Docker images using multi-stage builds and best practices
• Integrate security tools such as SAST, SCA, IaC, and container scanning into CI/CD pipelines
• Improve software supply chain security through dependency management and vulnerability scanning
• Manage AWS security, including IAM, Secrets Manager, and secure cloud deployments
• Resolve TLS/SSL and certificate-related issues
• Create reusable DevSecOps templates and security standards for engineering teams

EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.