Note: The job is a remote job and is open to candidates in USA. EPAM Systems is seeking a Lead Application Security Engineer to drive secure-by-design engineering for agent code and pipelines while owning vulnerability management for AI workloads. This role ensures that agentic AI development is secure and efficient, focusing on embedding security practices into the development lifecycle.
Responsibilities
- Embed SAST DAST and SCA into agent CI/CD pipelines
- Build and maintain an AI/LLM software bill of materials (SBOM) capability
- Lead threat modeling for agents against the OWASP LLM Top-10 and Agentic Top-10
- Define and enforce vulnerability-management SLAs for AI workloads
- Establish secure-SDLC guardrails for maker and developer teams
Skills
- 5+ years of experience in application security engineering
- Background in SAST, DAST and SCA tooling and triage
- Expertise in threat modeling with understanding of LLM/agent attack surfaces including prompt injection, tool abuse and data exfiltration
- Familiarity with AI/LLM supply-chain risk and SBOM practices
- Background in secure SDLC and DevSecOps pipeline integration
- Skills in Python scripting and automation for security tooling integration
- Relevant certifications (e.g., GWAPT, CSSLP, OSCP)
Benefits
- Delivering innovative solutions to industry leaders, making a global impact
- Enjoyable working environment, whether it is the vibrant office or the comfort of your home
- Opportunity to work abroad for up to two months per year
- Relocation opportunities within our offices in 55+ countries
- Corporate and social events
- Leadership development, career advising, soft skills and well-being programs
- Certifications, including GCP, Azure and AWS
- Unlimited access to LinkedIn Learning and Udemy
- Free English classes with certified teachers
- Participation in the Employee Stock Purchase Plan
- Monetary bonuses for engaging in the referral program
- Comprehensive medical & family care package
- Four trust days per year for personal needs
- Discounts for fitness clubs
- Benefits package (hotels, restaurants, stores and services)
- Five trust days per year (sick leave without a medical certificate)
- Benefits package (sports activities, a variety of stores and services)
- Discounts in local language schools, including online courses for the Kazakh language
- Medical & family care package
- Six trust days per year (sick leave without a medical certificate)
- Coverage of psychology sessions of your choice
- Housing support program: preferential mortgage access via Otbasy Bank partnership
- Discounts for fitness clubs and sports programs
- Discounts in local language schools, including offline courses for the Uzbek language
- Discounts for fitness clubs, dance schools and sports programs
Company Overview
Company H1B Sponsorship