{"id":2684188,"url":"https://alion.io/job/epam-systems-senior-application-security-engineer","title":"Senior Application Security Engineer","company":{"id":92,"name":"EPAM Systems","domain":"epam.com","url":"https://alion.io/company/epam-systems","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"HeadHunter","truth_index":{"grade":"D","score":44,"open_postings":54,"ghost_share":0.907,"stale_share":0,"repost_share":0.111,"time_to_fill_p50_days":50,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Vilnius, Lithuania"],"countries":["LT"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":3500,"max":5500,"currency":"EUR","period":"month","gross":true,"usd_annual":73980},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"GitHub","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Ansible","optional":true},{"name":"Azure","optional":true},{"name":"Azure DevOps","optional":true},{"name":"Docker","optional":true},{"name":"GitLab CI","optional":true},{"name":"Jenkins","optional":true},{"name":"Kubernetes","optional":true},{"name":"Prometheus","optional":true},{"name":"Python","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-10-02T01:40:30Z","employer_posted_date":null,"last_verified_at":"2026-10-02T01:40:30Z","board_verified":false,"closed_at":null,"days_open":15,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":15},"description":"Job Description\nEPAM is seeking a skilled Senior Application Security Engineer to help our clients strengthen their security posture.\n\nYou will collaborate with a range of security and non-security teams to establish secure coding standards, perform in-depth code reviews, embed SAST/DAST tools within the CI/CD pipeline, and support threat modeling throughout the software development lifecycle.\n\n_This position offers hybrid setup with the flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas._\n\nPerform security assessments, threat modeling, and evaluate penetration testing outcomes for applications\n\nWork alongside developers and other stakeholders to fix identified security weaknesses\n\nBuild and deploy automated security testing tools and workflows to detect vulnerabilities\n\nEmbed security tools, standards, and processes within the secure software development lifecycle (SSDLC)\n\nKeep current with emerging security threats and update scanning rules accordingly\n\nProvide training and guidance to developers on security best practices and awareness\n\nShape and drive the security strategy and roadmap for application development\n\nFine-tune and adapt SAST processes to meet application security needs\n\nGain thorough knowledge of SAST methodologies and champion their purpose within the development lifecycle\n\nPartner with developers to smoothly incorporate SAST tools into their workflows and CI/CD pipelines\n\nRequirements\n\nMinimum 5 years of experience in Application Security\n\nSolid background with Checkmarx CxSAST or similar SAST tools\n\nSkilled in CxQL for creating and adjusting scanning rules\n\nStrong grasp of SAST and its function in secure software development\n\nExperience with GitHub and embedding security scans into CI/CD pipelines\n\nSharp analytical abilities to interpret scan outcomes and enhance scan precision\n\nEffective communication skills for close collaboration with development teams and stakeholders\n\nComprehensive understanding of DevSecOps principles, focusing on security integration across all development stages\n\nFluent in English communication at a B2+ level\n\nNice to have\n\nFamiliarity with Python, Go, or other scripting languages and automation tools\n\nGeneral knowledge of Cloud Platforms\n\nExperience with CI/CD tools such as Jenkins, GitLab CI/CD, or Azure DevOps\n\nBackground in containerization and orchestration technologies like Docker and Kubernetes\n\nKnowledge of SecOps tools and practices, covering security monitoring, incident response, and threat modeling\n\nUnderstanding of Infrastructure as Code tools like Terraform or Ansible\n\nExperience with security monitoring and logging tools like ELK Stack or Prometheus\n\nCompany offers\n\nEngineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years\n\nAdvanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies\n\nWorld-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact\n\nProfessional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices\n\nGenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys\n\nEntrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life\n\nHybrid Setup: The flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas\n\nOther Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more","description_format":"text","description_chars":3849,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-16T07:10:36Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 101 · green card filings: 132","filings_12m":101,"filings_prev_12m":141,"green_card_filings_12m":132,"median_offered_wage_usd":124667,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":18}],"liveness":{"score":71,"band":"hot","label":"Hiring now","p_open":0.85,"p_active":0.84,"p_room":1,"age_days":15,"expected_fill_days":50,"reasons":["seen:15","win:early","comp:brand"],"computed_at":"2026-10-17T02:33:10Z"},"pay":{"stated_usd_annual":73980,"is_top_pay":false},"html_url":"https://alion.io/job/epam-systems-senior-application-security-engineer","json_url":"https://alion.io/job/epam-systems-senior-application-security-engineer.json","meta":{"generated_at":"2026-10-17T02:33:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3489,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":92},"rest":"https://alion.io/mcp/rest/get_company?id=92"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fepam-systems-senior-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fepam-systems-senior-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fepam-systems-senior-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/epam-systems-senior-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fepam-systems-senior-application-security-engineer"}]}