Senior Security Engineer
Primary stack
Nice to have's
Job description
About the Position
We are seeking a Senior Security Engineer with expertise in DevSecOps and open-source security to join our team in Ukraine. The role focuses on building security solutions that help organizations monitor, assess, and improve the security posture of open-source software.
Responsibilities
- Contribute to the development and enhancement of solutions for open-source vulnerability monitoring and security rating
- Support and improve CI/CD pipelines and GitHub Actions–based workflows
- Apply DevSecOps and secure engineering practices throughout the software lifecycle
- Collaborate closely with cross-functional teams to deliver scalable, reliable, and secure solutions
- Share knowledge and support overall product quality as a team player
Requirements
- 3+ years of experience in security engineering with expertise in DevSecOps orchestration, Secure Software Development Life Cycle, and security-as-code
- Knowledge of open-source security including Software Composition Analysis and OSS license compliance
- Understanding of CVSS scoring, exploitability analysis, and vulnerability remediation strategies
- Hands-on experience securing GitHub Actions workflows and integrating security gates into CI/CD pipelines
- Familiarity with security guidelines and standards
- Strong communication skills, ownership mindset, and ability to work effectively in a team environment
- English proficiency at B2 level or higher
We Offer
- Opportunity to work remotely from Kyiv, Ukraine
- Engaging in impactful projects that enhance open-source security
- Collaborative and innovative work environment
About the Company
EPAM Systems is a global software engineering and product development company that partners with the world’s leading businesses to deliver digital transformation and technology innovation.
© EPAM. This job description was sourced from the employer's public career page. TheJob is not the employer — we index the posting and route candidates to the source. All content rights and hiring decisions belong to the employer.
EPAM helps organizations innovate their business processes and rethink the way they manage their businesses so they can remain competitive in this new digital age.