devsecops engineer for software supply chain security

EPAM provides enterprise software products, open source solutions, and accelerators through its brands and SolutionsHub.

• Assess the security and compliance landscape for SBOM, ensuring alignment with industry best practices and regulatory requirements;
• Conduct in-depth assessments of existing and emerging security tools, identifying optimal solutions for SBOM generation, vulnerability detection, and supply chain risk management;
• Architect, integrate, and optimize security solutions within CI/CD pipelines, ensuring automation, efficiency, and minimal friction for engineering teams;
• Lead training and mentoring sessions to drive adoption of security tools, cultivate a security-first mindset, and establish long-term best practices.

• 3+ Years of proven experience in SecOps, DevSecOps, or Security Engineering, with a strong focus on software supply chain security and secure development practices;
• Deep understanding of SBOM frameworks, including SPDX and CycloneDX, and their role in securing software dependencies and mitigating supply chain risks;
• Hands-on experience with security tooling, including SCA, SAST, container security, and CI/CD security automation;
• Ability to design and implement scalable security solutions, balancing risk mitigation with engineering efficiency;
• Strong problem-solving skills, with the ability to evaluate complex security challenges and define pragmatic, high-impact solutions;
• Excellent command of written and spoken English (B2+ level).

• The engagement lasts 4-6 months.