{"id":4019666,"url":"https://alion.io/job/epam-systems-poland-senior-application-security-engineer-ai-models","title":"Senior Application Security Engineer (AI models)","company":{"id":2612641,"name":"EPAM Systems Poland","domain":"epam-poland.pl","url":"https://alion.io/company/epam-poland","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Poland"],"countries":["PL"],"hiring_countries":["PL"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Azure","optional":false},{"name":"C#","optional":false},{"name":"CI/CD","optional":false},{"name":"Copilot","optional":false},{"name":"GitHub","optional":false},{"name":"JavaScript","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Anthropic","optional":true},{"name":"AWS","optional":true},{"name":"GCP","optional":true},{"name":"Platform Engineering","optional":true}],"status":"live","first_seen_at":"2026-11-10T12:05:44Z","employer_posted_date":null,"last_verified_at":"2026-11-10T12:05:44Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"We are seeking a Senior Application Security Engineer to define consistent Security Software Development Lifecycle practices across all client technology projects.\nIn this role, you will ensure application security vulnerabilities are mitigated to tolerable levels throughout the planning and delivery cycles.\nThe ideal candidate brings strong application security knowledge, web application development experience, and team leadership skills, along with a solid understanding of OWASP, CWE25, Data Protection, Access Management, software vulnerabilities, secure design best practices, and threat modeling. You will collaborate with developers to produce secure code under tight deadlines in a dynamic environment.\nResponsibilities\nCollaborate as part of a team of software and security engineers to design, maintain, and build product security tools and services\nServe as the technical point of contact for product teams regarding CI/CD automation and Product Application Sec Ops\nLeverage approved AI models and Cyber Harness to assess application code for business logic weaknesses, misconfigurations, and vulnerabilities\nBuild and automate scripts that enable developers to easily consume security services delivered by the Sec Engineering and Automation team\nOwn security product QA and testing activities\nRun software composition analysis (SCA) tools\nInterpret and explain penetration testing findings to the software engineering team, assisting them with triage and risk mitigation guidance\nArticulate business risk when assessing software vulnerabilities\nContinuously improve the operations of SAST, DAST, and IaC security tools\nEnhance the operations of Web Application Firewalls (WAF) and IDS\nExpand security coverage and tooling in cloud environments such as Microsoft Azure and AWS\nRequirements\nDegree in Computer Science or Cyber Security\n3+ years of experience in Application Security with a strong application development background\nHands-on experience with Azure DevOps\nPrior experience using AI models and Cyber Harness to support security evaluation of applications and software code\nFamiliarity with GitHub, Copilot, and Codex\nKnowledge of OWASP Top 10 for Agentic AI, AI skills development, and security triage\nProficiency in coding with Python, JavaScript, C#, or PowerShell\nDeep understanding of OWASP, CWE25, Data Protection, Access Management, software vulnerabilities, secure design best practices, and threat modeling\nExcellent analytical skills with strong attention to detail\nCISSP, CSSLP, CEH, OSCP, or similar certification\nPresentation skills with the ability to communicate complex solutions to less technical audiences\nExcellent command of written and spoken English (B2+ level)\nNice to have\nPrior experience working in a large organization or within Financial Services\nExposure to secure SDLC program definition across enterprise technology projects\nWe offer\nWe gather like-minded people:\nTop tech minds driving innovation in AI, cloud and digital platform modernization\nSupportive team and agile, startup-like culture\nHybrid by design mode and opportunity to work remotely within Poland\nChance to work abroad for up to 60 days annually\nBusiness-driven relocation opportunities\n\nWe provide growth opportunities:\nCareer development programs\nThought leadership, mentoring, soft skills and well-being programs\nCertification (Anthropic, Gemini, GCP, Azure, AWS)\nEnglish classes\n\nWe cover it all:\nStable pay\nParticipation in the Employee Stock Purchase Plan with a 15% discount\nBenefits package (health insurance, multisport, shopping vouchers)\nReferral bonuses up to $2,000\nOffices featuring entertainment and relaxation zones, table tennis and football, free snacks, coffee and more\nCorporate, social and well-being events\n\nPlease, note:\nBenefits listed above are available to employees only\nWe are open for working with Contractors. Terms of B2B cooperation agreements are agreed individually\nWe will reach out to selected candidates exclusively\n\nEPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.\nTech stack\nApplication Security\nSecurity Engineering\nOWASP TOP 10\nthreat modeling\nSAST\nDAST\nAzure DevOps\nCI/CD\nIaC security\nSoftware Composition Analysis","description_format":"text","description_chars":4486,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Growth opportunities","Health insurance"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Application Security","IT Consulting & Digital Transformation","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-10T14:26:00Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":14,"reasons":["seen:0","win:early","comp:brand"],"computed_at":"2026-11-10T16:40:47Z"},"pay":null,"html_url":"https://alion.io/job/epam-systems-poland-senior-application-security-engineer-ai-models","json_url":"https://alion.io/job/epam-systems-poland-senior-application-security-engineer-ai-models.json","meta":{"generated_at":"2026-11-10T16:40:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4384,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2612641},"rest":"https://alion.io/mcp/rest/get_company?id=2612641"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fepam-systems-poland-senior-application-security-engineer-ai-models"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fepam-systems-poland-senior-application-security-engineer-ai-models"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fepam-systems-poland-senior-application-security-engineer-ai-models"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/epam-systems-poland-senior-application-security-engineer-ai-models\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fepam-systems-poland-senior-application-security-engineer-ai-models"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4019666}},{"tool":"search_jobs","arguments":{"company":"epam-poland.pl","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4019666},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}