Senior SecOps Engineer

We are looking for a Senior SecOps Engineer to join and support a team building security solutions that help organizations monitor, assess and improve the security posture of open-source software.

The team works on a platform that provides unified visibility into open-source vulnerabilities, as well as a solution that delivers security ratings for open-source libraries. These capabilities help development teams make better risk-based decisions and improve the overall security of the software delivery lifecycle.

Responsibilities

• Support the development and enhancement of solutions for open-source vulnerability monitoring and security rating
• Contribute to the improvement of CI/CD pipelines and GitHub Actions-based workflows
• Apply DevSecOps and secure engineering practices across the software delivery lifecycle
• Collaborate with engineers, security specialists, product stakeholders and other team members to deliver reliable and secure solutions
• Analyze, prioritize and address security-related topics connected to open-source components and dependencies
• Share knowledge and support team activities to drive continuous improvement of product quality and engineering practices

Requirements

• 5+ years of experience in security engineering with background in DevSecOps practices, Secure Software Development Life Cycle and security-as-code approaches
• Understanding of Software Composition Analysis, open-source vulnerability management and OSS license compliance
• Knowledge of CVSS scoring, exploitability assessment, vulnerability prioritization and remediation strategies
• Proficiency in GitHub Actions, CI/CD pipelines and integration of security checks or quality gates into delivery workflows
• Understanding of open-source security principles, vulnerability management practices and relevant security guidelines
• Strong communication skills, ownership mindset and ability to work effectively as part of a cross-functional team

We offer

• We gather like-minded people:
• • Top tech minds driving innovation in AI, cloud and digital platform modernization
  • Supportive team and agile, startup-like culture
  • Hybrid by design mode and opportunity to work remotely within Poland
  • Chance to work abroad for up to 60 days annually
  • Business-driven relocation opportunities
• We provide growth opportunities:
• • Career development programs
  • Thought leadership, mentoring, soft skills and well-being programs
  • Certification (Anthropic, Gemini, GCP, Azure, AWS)
  • English classes
• We cover it all:
• • Stable pay
  • Participation in the Employee Stock Purchase Plan with a 15% discount
  • Benefits package (health insurance, multisport, shopping vouchers)
  • Referral bonuses up to $2,000
  • Offices featuring entertainment and relaxation zones, table tennis and football, free snacks, coffee and more
  • Corporate, social and well-being events
• Please, note:
• • Benefits listed above are available to employees only
  • We are open for working with Contractors. Terms of B2B cooperation agreements are agreed individually
  • We will reach out to selected candidates exclusively

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.