{"id":3791738,"url":"https://alion.io/job/epam-systems-application-security-architect-ai-basic","title":"Application Security Architect + AI (basic)","company":{"id":92,"name":"EPAM Systems","domain":"epam.com","url":"https://alion.io/company/epam-systems","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"HeadHunter","truth_index":{"grade":"D","score":50,"open_postings":66,"ghost_share":0.788,"stale_share":0,"repost_share":0.182,"time_to_fill_p50_days":31,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Vilnius, Lithuania","Kaunas, Lithuania"],"countries":["LT"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":5600,"max":7200,"currency":"EUR","period":"month","gross":true,"usd_annual":96996},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"C#","optional":false},{"name":"CI/CD","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"JavaScript","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"Zero Trust","optional":false},{"name":"AI Agents","optional":true},{"name":"AWS","optional":true},{"name":"AWS Bedrock","optional":true},{"name":"Azure","optional":true},{"name":"Checkmarx","optional":true},{"name":"Copilot Studio","optional":true},{"name":"GitHub","optional":true},{"name":"Kubernetes","optional":true},{"name":"LangChain","optional":true},{"name":"LLM","optional":true},{"name":"OpenAI","optional":true},{"name":"OWASP ZAP","optional":true},{"name":"Power Automate","optional":true},{"name":"SBOM","optional":true},{"name":"Semgrep","optional":true},{"name":"SIEM","optional":true},{"name":"Snyk","optional":true},{"name":"SonarQube","optional":true},{"name":"STRIDE","optional":true},{"name":"Veracode","optional":true}],"status":"live","first_seen_at":"2026-11-05T02:42:00Z","employer_posted_date":null,"last_verified_at":"2026-11-05T02:42:00Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Job Description\nWe are seeking an experienced Application Security Architect with foundational AI knowledge to design and implement robust security architectures for enterprise applications, APIs, microservices and cloud-native solutions. In this role, you will drive secure-by-design principles, integrate security across the development lifecycle, and leverage AI-assisted tools to enhance application security activities while collaborating with cross-functional teams to protect critical business systems.\n\n_This position offers hybrid setup with the flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas._\n\nDesign and implement security architectures and controls for enterprise applications, APIs, microservices and cloud-native applications\n\nGather business, technical and compliance requirements to design secure application solutions for new implementations, migrations and security improvements\n\nDefine and improve application security capabilities, including authentication, authorization, API security, encryption, secrets management and secure configuration\n\nConduct security architecture reviews, threat modeling, secure design assessments and application security risk analysis\n\nDevelop application security reference architectures, security standards, secure design patterns and secure development guidelines\n\nSupport Secure Software Development Lifecycle (SSDLC), secure-by-design principles and DevSecOps integration across engineering teams\n\nEvaluate and improve application security technologies and processes, including SAST, DAST, SCA, secrets scanning and vulnerability management\n\nReview application security vulnerabilities, identify architectural weaknesses and recommend appropriate remediation strategies\n\nCollaborate with development, DevOps, cloud, infrastructure, IAM, security operations and compliance teams to integrate security into application design and development\n\nSupport security automation and application security tooling integration within CI/CD pipelines and development workflows\n\nUse AI-assisted tools and workflows to improve application security activities, including threat modeling and security architecture analysis, vulnerability assessment and remediation recommendations, secure code review and security testing support, application security requirements and compliance analysis, security scripting, reporting and documentation, and repetitive task and workflow automation\n\nIdentify opportunities for AI-assisted application security automation while ensuring appropriate validation, data protection and human oversight\n\nCommunicate application security risks, architectural decisions and remediation plans to stakeholders and security leadership\n\nRequirements\n\nBachelor's degree in Computer Science, Cybersecurity, Engineering or equivalent practical experience\n\n5+ years of information security experience, with a focus on application security architecture, secure application design or application security engineering\n\nExperience delivering or significantly contributing to application security architecture, secure development, DevSecOps integration or application security improvement projects\n\nStrong hands-on expertise in application security, including identifying vulnerabilities, assessing security risks and recommending technical security controls\n\nStrong understanding of application security principles, OWASP Top 10, secure coding practices, API security, authentication, authorization and common vulnerability mitigation techniques\n\nPractical experience with application security architecture reviews, threat modeling, secure design assessments or security risk analysis\n\nExperience with application security tools and technologies such as SAST, DAST, SCA, secrets scanning or similar security testing solutions\n\nGood understanding of Secure SDLC, DevSecOps, CI/CD security and secure-by-design principles\n\nWorking knowledge of at least one programming language such as Python, Java, C#, JavaScript/TypeScript or Go, sufficient to review code and assess application security risks\n\nWorking knowledge of related security domains, including cloud security, IAM, network security, data protection and security operations, without requiring deep specialization in each\n\nUnderstanding of security architecture principles and frameworks such as Zero Trust, NIST, ISO 27001 or OWASP guidelines\n\nFamiliarity with application security automation, scripting and security tooling integration\n\nIntermediate practical experience with AI-assisted tools and automation, including some of the following: using AI tools for vulnerability analysis, threat modeling and security research, applying structured prompting for technical and security tasks, generating and validating scripts, queries, secure code recommendations and security documentation with AI, using AI to simplify repetitive application security workflows, basic experience configuring AI-assisted workflows or integrations\n\nUnderstanding of safe AI usage, including data protection, access control and validation of AI-generated outputs. Willingness to further develop AI automation skills\n\nStrong communication and collaboration skills\n\nHands-on technical proficiency\n\nNice to have\n\nExperience with application security platforms such as Snyk, Checkmarx, Veracode, SonarQube, Semgrep, GitHub Advanced Security, Burp Suite or OWASP ZAP\n\nExperience with application security architecture for cloud-native applications, microservices, containers and Kubernetes environments\n\nExperience with threat modeling methodologies and tools such as STRIDE, OWASP Threat Dragon or Microsoft Threat Modeling Tool\n\nExperience with DevSecOps, CI/CD security automation, Infrastructure as Code scanning and policy-as-code solutions\n\nExperience with software supply chain security, SBOM, dependency management and third-party component security\n\nExperience with API security, OAuth 2.0, OpenID Connect, secrets management and secure application authentication patterns\n\nExperience integrating application security findings with SIEM/SOAR, ticketing or vulnerability management platforms\n\nExperience with AI automation, AI agents, Microsoft Copilot Studio, Azure OpenAI, Amazon Bedrock, LangChain, Power Automate or similar tools\n\nUnderstanding of AI application security risks, including prompt injection, data leakage, insecure output handling and excessive AI agent permissions\n\nFamiliarity with OWASP Top 10 for LLM Applications or similar AI security guidelines\n\nSecurity certifications such as CSSLP, CISSP, CISM, CCSP, GWAPT, GWEB, OSCP, OSWE or similar\n\nAI-related certifications such as AI-900 or AWS Certified AI Practitioner\n\nCompany offers\n\nEngineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years\n\nAdvanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies\n\nWorld-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact\n\nProfessional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices\n\nGenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys\n\nEntrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life\n\nHybrid Setup: The flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas\n\nOther Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more","description_format":"text","description_chars":7829,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-05T06:52:20Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":31,"reasons":["seen:1","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-06T05:58:05Z"},"pay":{"stated_usd_annual":96996,"is_top_pay":false},"html_url":"https://alion.io/job/epam-systems-application-security-architect-ai-basic","json_url":"https://alion.io/job/epam-systems-application-security-architect-ai-basic.json","meta":{"generated_at":"2026-11-07T04:20:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10619,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":92},"rest":"https://alion.io/mcp/rest/get_company?id=92"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fepam-systems-application-security-architect-ai-basic"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fepam-systems-application-security-architect-ai-basic"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fepam-systems-application-security-architect-ai-basic"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/epam-systems-application-security-architect-ai-basic\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fepam-systems-application-security-architect-ai-basic"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3791738}},{"tool":"search_jobs","arguments":{"company":"epam.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3791738},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}