Lead Security Engineer (Cryptography and Threat Modeling)

About the Position

We are seeking a Lead Security Engineer specializing in cryptography and threat modeling to join our team in the Republic of Lithuania or Latvia. This role is a CONTRACTOR position with a Hybrid work location type.

Responsibilities

• Drive the creation of a crypto inventory across Signavio products, for example, using IBM QSE and agentic validation.
• Review findings and issues related to FIPS 140-3, and define, coordinate, and track mitigation plans together with engineering teams.
• Support threat modeling activities for cloud applications by facilitating workshops and producing clear, actionable reports.
• Contribute to broader Secure Development and Operations Lifecycle (SDOL) activities within the team, as needed.

Requirements

• 5+ years of experience in software security - you have implemented security initiatives end-to-end, not only provided advisory support.
• Ability to work independently, take ownership, and drive topics to completion with minimal supervision.
• Strong documentation, communication, and stakeholder management skills.
• English proficiency at B2 level or higher.

Nice to Have

• Familiarity with IBM QSE.
• Experience in cryptography.
• Hands-on experience with agentic AI.
• Experience using Jira for task and project tracking.
• Prior exposure to security requirements in highly regulated environments, such as FedRAMP.

We Offer

• Opportunity to work in a dynamic and innovative environment.
• Collaborate with a dedicated and experienced team.
• Competitive contractor terms.

About the Company

EPAM Systems is a global software engineering and product development company with a focus on delivering high-quality solutions to clients worldwide. We are committed to fostering a culture of continuous learning and professional growth.