Senior SecOps Engineer

About the Position

We are seeking a Senior SecOps Engineer with strong expertise in software supply chain security to enhance our security posture around Software Bill of Materials and related tooling. This 4-6 month engagement focuses on defining security requirements, evaluating and implementing solutions, and enabling the engineering team through best practices and training.

Skills

• Security.Engineering
• Docker
• Kubernetes
• Software Composition Analysis
• Argo CD
• Google Cloud Platform

Responsibilities

• Assess the security and compliance landscape for SBOM, ensuring alignment with industry best practices and regulatory requirements
• Conduct in-depth assessments of existing and emerging security tools, identifying optimal solutions for SBOM generation, vulnerability detection, and supply chain risk management
• Architect, integrate, and optimize security solutions within CI/CD pipelines, ensuring automation, efficiency, and minimal friction for engineering teams
• Lead training and mentoring sessions to drive adoption of security tools, cultivate a security-first mindset, and establish long-term best practices

Requirements

• 3+ years of proven experience in SecOps, DevSecOps, or Security Engineering, with a strong focus on software supply chain security and secure development practices
• Deep understanding of SBOM frameworks (e.g., SPDX, CycloneDX) and their role in securing software dependencies and mitigating supply chain risks
• Hands-on experience with security tooling, including SCA, SAST, container security, and CI/CD security automation
• Ability to design and implement scalable security solutions, balancing risk mitigation with engineering efficiency
• Strong problem-solving skills, with the ability to evaluate complex security challenges and define pragmatic, high-impact solutions
• Excellent command of written and spoken English (B2+ level)

What we offer

• Enjoyable working environment, whether it is the vibrant office or the comfort of your own home
• Opportunity to work abroad for up to two months per year
• Relocation opportunities within our offices in 55+ countries
• Corporate and social events
• We invest in your growth: Leadership development, career advising, soft skills and well-being programs, Certifications, including GCP, Azure and AWS, Unlimited access to EPAM's internal learning database, Free English classes with certified teachers
• We cover it all: Participation in the Employee Stock Purchase Plan, Monetary bonuses for engaging in the referral program, Comprehensive medical & family care package, Five trust days per year (sick leave without a medical certificate), Benefits package (sports activities, a variety of stores and services)
• Housing support program: preferential mortgage access via Otbasy Bank partnership

About the Company

We connect like-minded people: Delivering innovative solutions to industry leaders, making a global impact.