Senior SecOps Engineer

We are looking for a Senior SecOps Engineer to join and support a team building security solutions that help organizations monitor, assess and improve the security posture of open-source software.

The team works on a platform that provides unified visibility into open-source vulnerabilities, as well as a solution that delivers security ratings for open-source libraries. These capabilities help development teams make better risk-based decisions and improve the overall security of the software delivery lifecycle.

Responsibilities

• Support the development and enhancement of solutions for open-source vulnerability monitoring and security rating
• Contribute to the improvement of CI/CD pipelines and GitHub Actions-based workflows
• Apply DevSecOps and secure engineering practices across the software delivery lifecycle
• Collaborate with engineers, security specialists, product stakeholders and other team members to deliver reliable and secure solutions
• Analyze, prioritize and address security-related topics connected to open-source components and dependencies
• Share knowledge and support team activities to drive continuous improvement of product quality and engineering practices

Requirements

• 5+ years of experience in security engineering with background in DevSecOps practices, Secure Software Development Life Cycle and security-as-code approaches
• Understanding of Software Composition Analysis, open-source vulnerability management and OSS license compliance
• Knowledge of CVSS scoring, exploitability assessment, vulnerability prioritization and remediation strategies
• Proficiency in GitHub Actions, CI/CD pipelines and integration of security checks or quality gates into delivery workflows
• Understanding of open-source security principles, vulnerability management practices and relevant security guidelines
• Strong communication skills, ownership mindset and ability to work effectively as part of a cross-functional team

We offer

• We gather like-minded people:
  • Engineering community of industry professionals
  • Friendly team and enjoyable working environment
  • Flexible schedule and opportunity to work remotely within Poland
  • Chance to work abroad for up to 60 days annually
  • Business-driven relocation opportunities
• We provide growth opportunities:
  • Outstanding career roadmap
  • Leadership development, career advising, soft skills, and well-being programs
  • Certification (GCP, Azure, AWS)
  • Unlimited access to LinkedIn Learning, Get Abstract, Cloud Guru
  • English classes
• We cover it all:
  • Stable income (Employment Contract or B2B)
  • Participation in the Employee Stock Purchase Plan
  • Benefits package (health insurance, multisport, shopping vouchers)
  • Strategically located offices featuring entertainment and relaxation zones, table tennis and football, free snacks, fantastic coffee, and more
  • Referral bonuses
  • Corporate, social and well-being events
• Please, note:
  • The set of bonuses might vary based on the role you apply for - specifics will be discussed with our recruiter during the general interview.
  • We will reach out to selected candidates exclusively.

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.