application security engineer

EPAM Systems is a global provider of software engineering and IT consulting services that delivers innovative solutions to industry leaders. The company operates across various sectors, focusing on technology-driven transformation and digital innovation.

• Embed SAST, DAST, and SCA into agent CI/CD pipelines;
• Build and maintain an AI/LLM software bill of materials (SBOM) capability;
• Lead threat modeling for agents against the OWASP LLM Top-10 and Agentic Top-10;
• Define and enforce vulnerability-management SLAs for AI workloads;
• Establish secure-SDLC guardrails for maker and developer teams.

• 5+ Years of experience in application security engineering;
• Background in SAST, DAST, and SCA tooling and triage;
• Expertise in threat modeling with understanding of LLM/agent attack surfaces including prompt injection, tool abuse, and data exfiltration;
• Familiarity with AI/LLM supply-chain risk and SBOM practices;
• Background in secure SDLC and DevSecOps pipeline integration;
• Nice to have: Skills in Python scripting and automation for security tooling integration, relevant certifications (e.g., GWAPT, CSSLP, OSCP).

• Opportunity to work abroad for up to two months per year;
• Relocation opportunities within offices in 55+ countries;
• Leadership development, career advising, soft skills, and well-being programs;
• Certifications, including GCP, Azure, and AWS;
• Unlimited access to LinkedIn Learning and Udemy;
• Free English classes with certified teachers;
• Discounts in local language schools, including online courses for the Kazakh language;
• Participation in the Employee Stock Purchase Plan;
• Monetary bonuses for engaging in the referral program;
• Medical & family care package;
• Six trust days per year;
• Coverage of psychology sessions;
• Benefits package including sports activities and discounts;
• Housing support program via Otbasy Bank partnership.