{"id":3857183,"url":"https://alion.io/job/epam-systems-ai-first-application-security-engineer","title":"AI-first Application Security Engineer","company":{"id":92,"name":"EPAM Systems","domain":"epam.com","url":"https://alion.io/company/epam-systems","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"HeadHunter","truth_index":{"grade":"C","score":59,"open_postings":83,"ghost_share":0.627,"stale_share":0,"repost_share":0.253,"time_to_fill_p50_days":31,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Vilnius, Lithuania","Kaunas, Lithuania"],"countries":["LT"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":3500,"max":5500,"currency":"EUR","period":"month","gross":true,"usd_annual":74100},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"Java","optional":false},{"name":"Red Teaming","optional":false},{"name":"Swift","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-11-06T02:42:05Z","employer_posted_date":null,"last_verified_at":"2026-11-06T02:42:05Z","board_verified":false,"closed_at":null,"days_open":1,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":1},"description":"Job Description\nWe are looking for an Application Security Engineer who uses AI-assisted tooling to build security into the software development lifecycle (SDLC) and reduce the number of vulnerabilities deployed to production. You will use AI to speed up security analysis, automate feedback loops, and scale secure engineering practices across teams, while applying human judgment to validate findings, make risk decisions, and guide engineers.\n\n_This position offers hybrid setup with the flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas._\n\nSecure all steps of the software development lifecycle holistically, using AI-assisted analysis to identify risks early\n\nDefine secure coding guidelines as part of security requirements, and implement them in CI/CD pipelines with AI-supported checks where appropriate\n\nProvide fast feedback to developers by running automated security checks in CI/CD, with AI helping to triage, prioritize, and explain results\n\nApply practical knowledge of security tools for automated software testing (SAST, DAST, SCA, secrets detection) within CI/CD pipelines\n\nProfessionally secure the software delivery process, from build to deployment\n\nConduct secure coding awareness training and share best practices, including how to use AI coding assistants safely and securely\n\nMaintain a strong understanding of programming languages (Java, Swift) to review code and provide actionable guidance\n\nCommunicate effectively with engineers to promote \"security by design\"\n\nAlign with engineering leadership to prioritize and streamline security fixes, making remediation a positive experience for software engineers\n\nMonitor and report potential vulnerabilities, using AI to deduplicate and enrich findings and automatically create tickets\n\nDrive remediation within engineering teams and track progress to closure\n\nDevelop threat models and attack trees for in-scope applications, using AI to accelerate drafting while validating outputs with domain expertise\n\nSet up and coordinate penetration tests across web and mobile (Android/iOS) applications, and track findings for remediation\n\nSupport attack modeling and red teaming exercises\n\nAssist the Information Security Officer (ISO) in ensuring compliance with standards such as ISO 27001, TISAX, and GDPR\n\nRequirements\n\n3+ years of experience in application security or similar security roles\n\nPractical knowledge of application security tooling for automated testing in CI/CD\n\nStrong understanding of Java and Swift\n\nExperience with threat modeling and attack trees\n\nFamiliarity with web and mobile application security testing\n\nPractical experience using AI tools to support security engineering tasks, with awareness of their limitations and risks\n\nStrong communication skills and the ability to work with engineering leadership and development teams\n\nExcellent command of written and spoken English (B2+ level)\n\nCompany offers\n\nEngineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years\n\nAdvanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies\n\nWorld-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact\n\nProfessional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices\n\nGenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys\n\nEntrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life\n\nHybrid Setup: The flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas\n\nOther Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more","description_format":"text","description_chars":4080,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-06T06:56:00Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":31,"reasons":["seen:1","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-07T05:47:08Z"},"pay":{"stated_usd_annual":74100,"is_top_pay":false},"html_url":"https://alion.io/job/epam-systems-ai-first-application-security-engineer","json_url":"https://alion.io/job/epam-systems-ai-first-application-security-engineer.json","meta":{"generated_at":"2026-11-07T18:43:44Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28615,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":92},"rest":"https://alion.io/mcp/rest/get_company?id=92"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fepam-systems-ai-first-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fepam-systems-ai-first-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fepam-systems-ai-first-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/epam-systems-ai-first-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fepam-systems-ai-first-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3857183}},{"tool":"search_jobs","arguments":{"company":"epam.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3857183},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}