Senior Application Security Engineer (AI models)

Brak informacji o wynagrodzeniu

SeniorZdalnieFull-time

#477905·Dodano 3 dni temu·1

Źródło: EPAM Systems

Aplikuj teraz

Tech Stack / Keywords

Application SecurityAzure DevOpsOWASPCWE25Python JavaScript C#PowerShellSASTDAST

Podsumowanie oferty

Define consistent Security Software Development Lifecycle practices across client technology projects and help mitigate application security vulnerabilities throughout planning and delivery. Assess application code using approved AI models and Cyber Harness, and build security tools and services with product and security engineering teams.

Wymagania

Degree in Computer Science or Cyber Security.
3+ years of experience in Application Security, with a strong application development background.
Hands-on experience with Azure DevOps.
Prior experience using AI models and Cyber Harness to support security evaluation of applications and software code.
Familiarity with GitHub, Copilot, and Codex.
Knowledge of OWASP Top 10 for Agentic AI, AI skills development, and security triage.
Proficiency in coding with Python, JavaScript, C#, or PowerShell.
Deep understanding of OWASP, CWE25, Data Protection, Access Management, software vulnerabilities, secure design best practices, and threat modeling.
Excellent analytical skills with strong attention to detail.
CISSP, CSSLP, CEH, OSCP, or similar certification.
Presentation skills and the ability to communicate complex solutions to less technical audiences.
Excellent command of written and spoken English (B2+ level).

Nice to have:

Prior experience working in a large organization or within Financial Services.
Exposure to secure SDLC program definition across enterprise technology projects.

Obowiązki

Collaborate with software and security engineers to design, maintain, and build product security tools and services.
Serve as the technical point of contact for product teams on CI/CD automation and Product Application Sec Ops.
Use approved AI models and Cyber Harness to assess application code for business logic weaknesses, misconfigurations, and vulnerabilities.
Build and automate scripts that help developers consume security services delivered by the Sec Engineering and Automation team.
Own security product QA and testing activities.
Run software composition analysis (SCA) tools.
Interpret and explain penetration testing findings to software engineering teams, assisting with triage and risk mitigation guidance.
Articulate business risk when assessing software vulnerabilities.
Continuously improve the operation of SAST, DAST, and IaC security tools.
Enhance the operation of Web Application Firewalls (WAF) and IDS.
Expand security coverage and tooling in cloud environments such as Microsoft Azure and AWS.

Benefity

Career development programs.
Thought leadership, mentoring, soft skills, and well-being programs.
Certification opportunities, including Anthropic, Gemini, GCP, Azure, and AWS.
English classes.
Participation in the Employee Stock Purchase Plan with a 15% discount.
Benefits package including health insurance, multisport, and shopping vouchers.
Referral bonuses up to $2,000.
Offices with entertainment and relaxation zones, table tennis, football, free snacks, and coffee.
Corporate, social, and well-being events.
Business-driven relocation opportunities.

Kursy językowe

Ubezpieczenie

Karta sportowa

Premie

Spotkania integracyjne

Darmowe przekąski

Napoje w biurze

Udziały pracownicze

Inne informacje

Remote work is available within Poland.
Opportunity to work abroad for up to 60 days annually.
Benefits listed are available to employees only; contractors are also welcome, with B2B terms agreed individually.

EPAM Systems

1797 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz