Senior Security Engineer

We are looking for a Senior Security Engineer to join a team building security solutions that help organizations monitor, assess and improve the security posture of open-source software. The work focuses on a platform for unified visibility into open-source vulnerabilities and a solution that provides security ratings for open-source libraries, enabling better risk-based decisions across development teams.

Responsibilities

• Contribute to the development and enhancement of solutions for open-source vulnerability monitoring and security rating
• Support and improve CI/CD pipelines and GitHub Actions–based workflows
• Apply DevSecOps and secure engineering practices throughout the software lifecycle
• Collaborate closely with cross-functional teams to deliver scalable, reliable and secure solutions
• Share knowledge and support overall product quality as a team player

Requirements

• 3+ years of experience in security engineering with expertise in DevSecOps orchestration, Secure Software Development Life Cycle and security-as-code
• Knowledge of open-source security including Software Composition Analysis and OSS license compliance
• Understanding of CVSS scoring, exploitability analysis and vulnerability remediation strategies
• Hands-on experience securing GitHub Actions workflows and integrating security gates into CI/CD pipelines
• Familiarity with security guidelines and standards
• Strong communication skills, ownership mindset and ability to work effectively in a team environment
• English proficiency at B2 level or higher

Benefits

With us you can:

• Work on a flexible schedule remotely or from any of our comfortable offices or coworking spaces in Ukraine
• Receive the necessary equipment to perform your work tasks
• Change projects and technology stacks within EPAM
• Gain experience in various business domains (Insurance, E-commerce, Healthcare, Finance, Travelling, Media, Artificial Intelligence, and more)
• Relocation opportunities may be available for eligible candidates, depending on the role and openings at other EPAM locations
• Participate in volunteer, charity programs and communities (both technical and interest-based)

We focus on your professional growth:

• You can plan your individual career path together with your manager
• Receive regular feedback from colleagues
• Improve your English for free with certified teachers (Speaking Clubs, client interview preparation courses, etc.)
• Get the opportunity to undergo free training and certification in AWS, GCP, or Azure Clouds
• Use the internal E-learn training program (18,200+ specialized training and mentoring programs)
• Access corporate accounts on LinkedIn Learning, Get Abstract and other partner resources
• Study at EPAM Solution Architecture School with the instructors who are practicing architects
• Develop as a leader, join Delivery Management, Resource Management, Leadership Essentials school and more
• Participate in internal communities (500+ meetups, technical discussions, brainstorming sessions, online events and conferences annually)

What we offer:

• Vacation and sick leave (including a sick leave without a medical certificate)
• A wide range of Voluntary Medical Insurance programs providing both medical treatment and various preventive options (including sports activities)
• Medical insurance for family members at corporate rates
• Company support during significant life events (childbirth or adoption, marriage, etc.)
• Support for psychological comfort: discounts on services from mental health specialists or coaches, thematic training
• E-kids program - a free programming language training program for EPAMers' children