Senior Security Engineer

About the role

We are looking for a Senior Security Engineer to join a team building security solutions that help organizations monitor, assess and improve the security posture of open‑source software. The work focuses on a platform for unified visibility into open‑source vulnerabilities and a solution that provides security ratings for open‑source libraries, enabling better risk‑based decisions across development teams.

Key responsibilities

• Contribute to the development and enhancement of solutions for open‑source vulnerability monitoring and security rating.
• Support and improve CI/CD pipelines and GitHub Actions‑based workflows.
• Apply DevSecOps and secure engineering practices throughout the software lifecycle.
• Collaborate closely with cross‑functional teams to deliver scalable, reliable and secure solutions.
• Share knowledge and support overall product quality as a team player.

Required profile

• 3+ years of experience in security engineering with expertise in DevSecOps orchestration, Secure Software Development Life Cycle and security‑as‑code.
• Knowledge of open‑source security including Software Composition Analysis and OSS license compliance.
• Understanding of CVSS scoring, exploitability analysis and vulnerability remediation strategies.
• Hands‑on experience securing GitHub Actions workflows and integrating security gates into CI/CD pipelines.
• Familiarity with security guidelines and standards.
• Strong communication skills, ownership mindset and ability to work effectively in a team environment.
• English proficiency at B2 level or higher.

Required skills

• DevSecOps orchestration
• Secure Software Development Life Cycle (SDLC)
• Security‑as‑code
• Software Composition Analysis (SCA)
• OSS license compliance
• CVSS scoring
• GitHub Actions
• CI/CD pipelines
• Security guidelines and standards

What we offer

• Flexible remote schedule within Ukraine.
• Equipment provided for work tasks.
• Opportunities to work across various business domains such as Insurance, E‑commerce, Healthcare, Finance, Travel, Media and AI.
• Potential relocation opportunities to other EPAM locations.
• Participation in volunteer, charity programs and internal technical communities.
• Professional growth support: career path planning, regular feedback, free English improvement courses, cloud certifications (AWS, GCP, Azure) and extensive internal training programs.
• Comprehensive medical insurance for employees and family members, plus voluntary medical insurance options.
• Generous vacation and sick‑leave policies, including sick leave without a medical certificate.
• Psychological support services and discounts for mental‑health specialists.
• E‑kids program offering free programming language training for employees' children.