Senior Security Engineer

We are looking for a Senior Security Engineer to strengthen the software supply chain and container security through practical automation and hands-on remediation. You will partner with engineering teams to harden Kubernetes workloads, improve CI/CD guardrails, and ship tested fixes.

Responsibilities

• Build and maintain hardened container base images for development and production use
• Implement Kubernetes security controls including runtime monitoring, network policies, and admission controllers
• Embed security checks and policy gates into CI/CD pipelines to deliver fast, automated feedback
• Secure software supply chain workflows across build systems, registries, and infrastructure-as-code
• Write and maintain security automation utilities and services in Go
• Triage vulnerabilities from pentests, SAST, DAST, and SCA and separate real risks from noise
• Partner with engineering teams to prioritize issues and commit remediation patches and dependency upgrades
• Automate alert grouping and first-pass fixes using LLMs and Model Context Protocol integrations
• Review and test all generated code before merging changes into codebases

Requirements

• 3+ years of security engineering experience in SaaS environments with DevSecOps and automation focus
• Proven leadership ability to partner with engineering teams and drive remediation to completion
• Hands-on project experience delivering hardened container images and Kubernetes security controls in production
• Strong Go (Golang) programming skills for building security tooling, CLIs, or services
• Solid CI/CD pipeline experience with automated testing and security checks
• Deep AWS security knowledge including IAM and container services such as EKS and ECS
• Practical Kubernetes security expertise including network policies, runtime controls, and admission controllers
• Strong vulnerability management skills across SAST, DAST, pentesting, and SCA with false-positive triage
• Terraform infrastructure-as-code skills for cloud and security configurations
• Strong communication skills to explain findings and provide actionable fixes to engineers
• Careful verification mindset when using AI coding assistants and LLM-driven automation
• Upper-Intermediate English proficiency (B2, Upper-Intermediate)

Nice to have

• Model Context Protocol (MCP) integration experience for security automation
• Supply chain security experience with SLSA, in-toto, Sigstore/Cosign, and SBOMs (SPDX or CycloneDX)
• Microsoft Azure (AKS) experience securing container workloads
• Node.js or TypeScript development experience

Benefits

• International projects with top brands
• Work with global teams of highly skilled, diverse peers
• Healthcare benefits
• Employee financial programs
• Paid time off and sick leave
• Upskilling, reskilling and certification courses
• Unlimited access to the LinkedIn Learning library and 22,000+ courses
• Global career opportunities
• Volunteer and community involvement opportunities
• EPAM Employee Groups
• Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn