Senior Security Engineer – Container & Supply Chain

About the role

EPAM is seeking a lead‑level Security Engineer to strengthen container and software supply chain security. You will work with multinational teams to harden container images, secure Kubernetes workloads, and build automation that turns scan results into tested fixes.

Key responsibilities

• Build and maintain hardened container base images with automated testing for development and production.
• Implement Kubernetes security controls, including runtime monitoring, network policies, and admission policies.
• Secure software supply chain workflows across build pipelines, registries, and infrastructure configuration.
• Create and evolve security automation tools and services using Go.
• Triage vulnerabilities from pentests, SAST, DAST, and SCA, and partner with engineering teams to prioritize and remediate findings.

Required profile

• 5+ years of security engineering experience in DevSecOps and security automation.
• Strong leadership and project ownership to write, test, and commit patches.
• Advanced Go (Golang) skills for building security tooling, CLIs, and services.
• Deep expertise in container security, Kubernetes hardening, and AWS security (IAM, EKS, ECS).
• Hands‑on experience with CI/CD pipelines, Terraform, and vulnerability management across SAST, DAST, SCA, and pentest findings.

Required skills

• Go (Golang)
• AWS (IAM, EKS, ECS)
• Kubernetes (network policies, runtime controls, admission policies)
• Terraform
• CI/CD automation
• SAST, DAST, SCA
• Gen AI assisted development
• Model Context Protocol (MCP) integration
• Azure AKS, Node.js (optional)
• Supply chain security tools (SLSA, in‑toto, Sigstore/Cosign, SBOM)

What we offer

• International projects with top brands and global career opportunities.
• Healthcare benefits, paid time off, and sick leave.
• Employee financial programs and upskilling, reskilling, certification courses.
• Unlimited access to LinkedIn Learning library (22,000+ courses).
• Volunteer and community involvement opportunities.