EPAM Systems

Senior Application Security Engineer

Brak informacji o wynagrodzeniu

SeniorZdalnie·PoznańFull-time

#454366·Dodano 17 dni temu·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

Application SecuritySecure Code Reviewthreat modelingOWASP TOP 10API securityAuthenticationAuthorizationCryptographysecrets management

Podsumowanie oferty

The Senior Application Security Engineer will focus on reducing security risk across web applications and APIs throughout the software development lifecycle. The role involves partnering with engineering teams to assess application security, perform secure design and code reviews, validate findings, prioritize issues, and drive remediation to closure. The primary purpose is practical security outcomes: identifying real risk, reducing false positives, and enabling efficient secure software delivery.

Wymagania

Hands-on experience in application security or product security
Strong knowledge of web application and API security, including OWASP Top 10 and common vulnerability classes
Practical experience with security assessments, secure design reviews, and/or secure code reviews
Understanding of threat modeling and secure software design principles
Strong knowledge of authentication, authorization, session management, input validation, cryptography, secrets handling, and data protection
Proficiency in English at a B2+ level

Obowiązki

Perform security assessments of web applications, APIs, services, and supporting components
Facilitate threat modeling and review architectures and technical designs from a security perspective
Conduct secure code reviews and identify vulnerabilities and insecure implementation patterns
Validate findings from automated tools, reduce false positives, and prioritize issues based on exploitability and business impact
Provide clear, actionable remediation guidance and secure implementation recommendations
Track findings through remediation and retesting in collaboration with development teams
Advise teams on authentication, authorization, session management, input validation, data protection, cryptography, secrets handling, and API security controls
Contribute to secure SDLC practices, security standards, guidelines, and reusable security patterns
Communicate security risks and recommendations to technical and non-technical stakeholders

Benefity

Join a team of top tech minds driving innovation in AI, cloud, and digital platform modernization
Supportive team and agile, startup-like culture with hybrid by design work mode and opportunity to work remotely within Poland
Chance to work abroad for up to 60 days annually and business-driven relocation opportunities
Career development programs including thought leadership, mentoring, soft skills, and well-being programs
Certification opportunities (Anthropic, Gemini, GCP, Azure, AWS)
English classes
Stable pay and participation in the Employee Stock Purchase Plan with a 15% discount
Benefits package including health insurance, multisport, and shopping vouchers
Referral bonuses up to $2,000
Offices featuring entertainment and relaxation zones, table tennis and football, free snacks, coffee, and more
Corporate, social, and well-being events
Open to working with Contractors on individually agreed B2B terms

Elastyczne godziny

Pakiet relokacyjny

Budżet konferencyjny

Dofinansowanie szkoleń

Spotkania integracyjne

Kursy językowe

Karta sportowa

Opieka zdrowotna

Premie

Udziały pracownicze

Darmowe przekąski

Napoje w biurze

Inne informacje

Klikając w przycisk „Aplikuj” lub w inny sposób wysyłając zgłoszenie rekrutacyjne, zgadzasz się na przetwarzanie Twoich danych osobowych przez EPAM Systems (Poland) sp. z o.o. z siedzibą w: Fabryczna 1A, 31-553 Kraków (Pracodawca), jako administratora danych osobowych w celu przeprowadzenia rekrutacji na stanowisko wskazane w ogłoszeniu zgodnie Polityką Prywatności dostępną na stronie: https://www.epam.com/applicant-privacy-notice

EPAM Systems

1552 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz