Senior Security Engineer

We are looking for a Senior Security Engineer with the drive to understand and fix critical application software vulnerabilities, mainly in legacy applications, while introducing agentic tooling (GHCP) for future vulnerability remediation as a key member of the Security Vulnerability Remediation engagement with our client.

Responsibilities

• Investigate and fix critical vulnerabilities flagged by Snyk/Wiz (or equivalent) across mainly legacy applications, including mixed/low-code tech stacks
• Implement code-level and dependency-level remediations (e.g., version/dependency bumps, secure coding pattern fixes) without introducing regressions
• Validate fixes against re-scan results within the agreed feedback-loop window, iterating until findings are genuinely closed
• Pair with AI/agentic tooling (GitHub Copilot) to accelerate triage, patch drafting, and remediation throughput
• Deploy fixes to dev/non-prod environments and hand off cleanly to QA and client application teams for test/release
• Feed recurring root-cause patterns back to the Lead Security Engineer/Architect to inform structural fixes

Requirements

• 3+ years of hands-on experience in application security and secure coding, ideally with real vulnerability remediation at volume
• Proficiency in common stacks such as Java and Python, with the capability to work in legacy/mixed-technology codebases
• Familiarity with SAST/SCA tooling (Snyk, Wiz, or equivalent) and skills in interpreting and prioritizing findings
• Competency in distinguishing true positives from false positives and judging remediation risk and feasibility
• Self-driven mindset, comfortable working independently against a backlog under time pressure
• English proficiency at a B2+ level

Nice to have

• Hands-on experience with GitHub Copilot or similar AI-assisted coding tools
• Familiarity with Talend or similar low-code/ETL platforms and their generated-code behavior
• Background in insurance, financial services, or another regulated industry
• Security certifications (e.g., OSCP, GWAPT, or similar)

We offer

We believe that the greatest strength of the company is its people. EPAM is fully committed to help its employees to reach their full potential and achieve their professional goals through continues learning. With this in mind, we would like to introduce to you few of the many opportunities and services which we believe will help you expand your current knowledge:

• Full access to cutting-edge tools and technologies
• Competitive compensation depending on experience and skills
• All-around Social package: professional & soft skills training, medical & family care programs, sports
• Free English classes
• Unlimited access to LinkedIn learning solutions
• Continuous experience exchange with experts and professionals worldwide
• Friendly team and comfortable working environment
• Engineering, corporate, and social events within and outside the Company
• Flexible working schedule
• Opportunities for self-realization

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.

Remote in Romania