Senior Security Software Engineer (Cryptography and Threat Modeling)
Primary stack
Nice to have's
Job description
About the Position
We are seeking a Senior Security Software Engineer specializing in Cryptography and Threat Modeling to drive cryptographic inventory initiatives and support FIPS 140-3 compliance across products. This role involves close collaboration with Security and product engineering teams to facilitate threat modeling workshops and deliver comprehensive security documentation.
Responsibilities
- Drive the creation of a crypto inventory using IBM QSE and agentic validation
- Review findings and issues related to FIPS 140-3 compliance
- Define, coordinate and track mitigation plans with engineering teams
- Facilitate threat modeling workshops for cloud applications
- Produce clear and actionable threat modeling reports
- Contribute to broader Secure Development and Operations Lifecycle (SDOL) activities
- Deliver a complete crypto inventory including FIPS 140-3 compliance reports
- Track progress on cryptographic mitigation plans in collaboration with engineering teams
- Prepare handover documentation and support knowledge transfer to the Security Team
Requirements
- 3+ years of hands-on experience in software security with end-to-end implementation of security initiatives
- Expertise in FIPS 140-3 compliance and cryptographic inventory management
- Capability to work independently and take ownership of security initiatives with minimal supervision
- Skills in driving topics to completion within complex security projects
- Proficiency in documentation, communication and stakeholder management
- Background in facilitating threat modeling workshops and producing security reports
- Upper-Intermediate English language proficiency (B2+)
Nice to Have
- Familiarity with IBM QSE
- Background in cryptography
- Capability to apply agentic AI in hands-on projects
- Proficiency in using Jira for task and project tracking
- Understanding of security requirements in highly regulated environments such as FedRAMP
Employment Details
- Position: Senior Security Software Engineer (Cryptography and Threat Modeling)
- Employment Type: CONTRACTOR
- Location: Remote in Armenia, & 3 others
© EPAM. This job description was sourced from the employer's public career page. TheJob is not the employer — we index the posting and route candidates to the source. All content rights and hiring decisions belong to the employer.
EPAM helps organizations innovate their business processes and rethink the way they manage their businesses so they can remain competitive in this new digital age.