{"id":1475831,"url":"https://alion.io/job/epam-systems-poland-lead-ai-security-engineer","title":"Lead AI Security Engineer","company":{"id":2612641,"name":"EPAM Systems Poland","domain":"epam-poland.pl","url":"https://alion.io/company/epam-poland","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["PL"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":104000,"max_usd":234000,"period":"year","method":"global_role_seniority_cell","sample_n":623},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"C#","optional":false},{"name":"CI/CD","optional":false},{"name":"Function Calling","optional":false},{"name":"GCP","optional":false},{"name":"Go","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"JavaScript","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Prompt Engineering","optional":false},{"name":"Python","optional":false},{"name":"RAG","optional":false},{"name":"Rest API","optional":false},{"name":"SBOM","optional":false},{"name":"Shift-Left","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"Agile","optional":true},{"name":"Anthropic","optional":true},{"name":"AutoGen","optional":true},{"name":"AWS Bedrock","optional":true},{"name":"Bicep","optional":true},{"name":"Burp Suite","optional":true},{"name":"Checkmarx","optional":true},{"name":"Checkov","optional":true},{"name":"CIS Benchmarks","optional":true},{"name":"Copilot","optional":true},{"name":"Copilot Studio","optional":true},{"name":"Gemini","optional":true},{"name":"GitHub","optional":true},{"name":"HashiCorp Vault","optional":true},{"name":"HIPAA","optional":true},{"name":"ISO 27001","optional":true},{"name":"Kubernetes","optional":true},{"name":"LangChain","optional":true},{"name":"OpenAI","optional":true},{"name":"OWASP ZAP","optional":true},{"name":"PCI DSS","optional":true},{"name":"Platform Engineering","optional":true},{"name":"Semgrep","optional":true},{"name":"SIEM","optional":true},{"name":"Sigstore","optional":true},{"name":"SLSA","optional":true},{"name":"Snyk","optional":true},{"name":"SOC 2","optional":true},{"name":"SonarQube","optional":true},{"name":"Terraform","optional":true},{"name":"Tool Use","optional":true},{"name":"Trivy","optional":true},{"name":"Vault","optional":true},{"name":"Veracode","optional":true}],"status":"live","first_seen_at":"2026-09-29T18:16:14Z","employer_posted_date":null,"last_verified_at":"2026-09-29T18:16:14Z","board_verified":false,"closed_at":null,"days_open":20,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":20},"description":"We are seeking a Lead AI Security Engineer to secure software across the full development lifecycle. This role embeds security into design, code, build and release; operates application security tooling and pipelines; partners with engineering to drive remediation; and applies AI both to accelerate AppSec work and to secure AI- and LLM-powered applications.\nResponsibilities\nEmbed security into the full software development lifecycle and drive shift-left and secure-by-design practices across engineering teams\nPerform and facilitate threat modeling, architecture security reviews, and design reviews for applications, services, and APIs\nConduct secure code reviews (manual and AI-assisted) and advise developers on secure coding patterns and remediation\nImplement, configure, tune, and operate application security tooling, including SAST, DAST, IAST, SCA, secrets scanning, and IaC scanning, integrated into CI/CD pipelines\nTriage, validate, prioritize, and reduce false positives in security findings, and partner with development teams to track issues through to remediation\nDefine, implement, and maintain security gates and policies in CI/CD pipelines that balance risk reduction with developer velocity\nSecure the software supply chain, including dependency and open-source risk management, SBOM generation, artifact integrity and signing, and build pipeline hardening\nSupport and coordinate application penetration testing and validate fixes for identified vulnerabilities\nDrive secrets management, secure configuration, API security, container and image security, and microservice security practices\nEstablish and run a security champions program, and develop and deliver secure-coding training, guidelines, and reusable security patterns for developers\nDefine and maintain application security standards, baselines, and policy-as-code, and contribute to vulnerability management and risk-acceptance processes\nBuild, deploy, and maintain AI-assisted automations and agentic workflows that reduce manual effort across daily application security activities, such as: vulnerability triage, deduplication, prioritization, and false-positive reduction; automated and assisted code review with concrete remediation guidance and example fixes; threat modeling support and abuse-case and attack-path generation; finding enrichment, root-cause analysis, and remediation-PR drafting; compliance evidence collection; secure-coding documentation, query, and runbook automation\nBuild and integrate AI agents and LLM-backed automations into the SDLC and CI/CD pipelines, connecting models to scanners, code hosts, ticketing, and security tooling via function calling, REST, and webhooks\nDevelop, test, and maintain reusable prompts, structured-prompting patterns, and prompt templates for recurring AppSec tasks, and tune them for accuracy, signal quality, and safe behavior\nImplement retrieval over codebases, security standards, and remediation guidance (for example RAG) so AI assistants answer from current, authoritative internal context rather than guesswork\nBuild evaluation, validation, and human-in-the-loop checkpoints into AI-assisted AppSec workflows, including output verification, guardrails, and approval gates before findings, fixes, or pipeline decisions are acted on\nImplement security and privacy controls for AppSec AI usage, including least-privilege access for agents, source-code and secrets handling, prompt-injection resistance, and auditability of AI-driven actions\nDesign, implement, and operate security controls for AI- and LLM-powered application features, including input and output validation, prompt-injection and jailbreak defenses, tool- and function-call authorization, rate limiting, and model and data access governance, aligned to the OWASP Top 10 for LLM Applications\nDefine and enforce guardrails for secure adoption of AI in product engineering, covering prompt security, model and tool access control, output handling, data protection, auditability, and human-in-the-loop processes, and advise development teams on building AI features securely\nRequirements\nBachelor's degree in Computer Science, Information Security, Engineering, or equivalent practical experience\nHands-on application security experience across the software development lifecycle\nStrong understanding of common application vulnerability classes and mitigations, including the OWASP Top 10, and of secure coding principles\nPractical experience with application security tooling, such as SAST, DAST, SCA, and secrets scanning, and integrating it into CI/CD\nWorking knowledge of at least one programming language (for example Python, Java, C#, JavaScript/TypeScript, or Go) sufficient to read code and assess vulnerabilities\nExperience with threat modeling and secure design review methodologies\nUnderstanding of DevOps/DevSecOps practices, CI/CD pipelines, and secure-by-design principles\nFamiliarity with cloud application security concepts across at least one major cloud platform such as Azure, AWS, or GCP\nExperience participating in at least several production projects or engineering teams\nAbility to work closely with developers, architects, QA engineers, DevOps, product, and security teams, and to influence without owning the codebase\nAbility to follow, maintain, and improve defined security processes\nPractical understanding of AI-assisted productivity and automation beyond basic chatbot usage, including at least some of the following: building or configuring AI agents; using AI to automate repetitive security or engineering tasks; integrating LLMs with tools, APIs, documents, or workflows; prompt engineering and structured prompting; creating AI-assisted runbooks, scripts, queries, or documentation; using AI tools securely with awareness of sensitive data handling and access control\nGood communication skills and the ability to explain security risks, technical decisions, and remediation plans to both technical and non-technical stakeholders\nNice to have\nExperience with application security platforms and tools such as Snyk, Checkmarx, Veracode, SonarQube, Semgrep, GitHub Advanced Security, Burp Suite, OWASP ZAP, or similar\nExperience with software supply chain security, including SBOM, SLSA, Sigstore, and dependency and artifact integrity controls\nExperience with Infrastructure as Code and policy-as-code security tools such as Terraform, Bicep, ARM templates, OPA, Checkov, or Trivy\nExperience with container and Kubernetes security, including image scanning, registries, runtime protection, and network policies\nExperience with API security, secrets management (for example HashiCorp Vault, Azure Key Vault), and microservice security patterns\nUnderstanding of at least one compliance or security framework, such as ISO 27001, NIST, CIS Benchmarks, PCI DSS, HIPAA, SOC 2, or SOX\nExperience integrating security findings with SIEM/SOAR, ticketing, and vulnerability management workflows\nExperience with AI/LLM platforms or frameworks such as Azure OpenAI, Azure AI Foundry, Amazon Bedrock, Microsoft Copilot Studio, LangChain, or AutoGen\nUnderstanding of AI and LLM application security risks, including prompt injection, insecure output handling, data leakage, excessive agency, insecure tool use, model governance, and AI supply chain risks (for example, awareness of the OWASP Top 10 for LLM Applications)\nSecurity certifications such as: CSSLP: Certified Secure Software Lifecycle Professional; GWAPT / GWEB: GIAC Web Application Penetration Tester / Web Application Defender; OSCP / OSWE: Offensive Security certifications; CISSP, CISM, CSSLP, CCSP, or similar; AI-related certifications are a plus, for example: AI-900: Microsoft Azure AI Fundamentals; AI-102: Azure AI Engineer Associate\nWe offer\nWe gather like-minded people:\nTop tech minds driving innovation in AI, cloud and digital platform modernization\nSupportive team and agile, startup-like culture\nHybrid by design mode and opportunity to work remotely within Poland\nChance to work abroad for up to 60 days annually\nBusiness-driven relocation opportunities\n\nWe provide growth opportunities:\nCareer development programs\nThought leadership, mentoring, soft skills and well-being programs\nCertification (Anthropic, Gemini, GCP, Azure, AWS)\nEnglish classes\n\nWe cover it all:\nStable pay\nParticipation in the Employee Stock Purchase Plan with a 15% discount\nBenefits package (health insurance, multisport, shopping vouchers)\nReferral bonuses up to $2,000\nOffices featuring entertainment and relaxation zones, table tennis and football, free snacks, coffee and more\nCorporate, social and well-being events\n\nPlease, note:\nBenefits listed above are available to employees only\nWe are open for working with Contractors. Terms of B2B cooperation agreements are agreed individually\nWe will reach out to selected candidates exclusively\n\nEPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.","description_format":"text","description_chars":9185,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Growth opportunities","Health insurance"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":[],"lifecycle":[{"event":"open","at":"2026-09-29T18:47:09Z"}],"visa":[],"liveness":{"score":32,"band":"fade","label":"Fading","p_open":0.85,"p_active":0.829,"p_room":0.45,"age_days":19,"expected_fill_days":12,"reasons":["seen:19","wave","velocity","win:tail","comp:brand"],"computed_at":"2026-10-19T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/epam-systems-poland-lead-ai-security-engineer","json_url":"https://alion.io/job/epam-systems-poland-lead-ai-security-engineer.json","meta":{"generated_at":"2026-10-20T04:32:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5105,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2612641},"rest":"https://alion.io/mcp/rest/get_company?id=2612641"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fepam-systems-poland-lead-ai-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fepam-systems-poland-lead-ai-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fepam-systems-poland-lead-ai-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/epam-systems-poland-lead-ai-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fepam-systems-poland-lead-ai-security-engineer"}]}