Auto-apply is a Pro feature

Let Findyet apply to this job for you:

  • Your CV is tailored to this posting.
  • The application form's questions are answered from your profile.
  • You review everything and approve before anything is sent.
  • Findyet submits the application and adds it to your tracker.

Available on Greenhouse postings today, up to 3 applications a day on Pro.

The first 100 verified accounts get Pro free for 90 days.

See plans

EPAM

NewBe an early applicant

Senior/Lead SecOps Engineer

Posted
Discussion

We are seeking a Senior/Lead SecOps Engineer with strong expertise in software supply chain security to enhance our security posture around Software Bill of Materials and related tooling. This 4-6 month engagement focuses on defining security requirements, evaluating and implementing solutions, and enabling the engineering team through best practices and training.

Responsibilities

  • Assess the security and compliance landscape for SBOM, ensuring alignment with industry best practices and regulatory requirements
  • Conduct in-depth assessments of existing and emerging security tools, identifying optimal solutions for SBOM generation, vulnerability detection, and supply chain risk management
  • Define security requirements and strategy for SBOM-related tooling and processes
  • Architect, integrate, and optimize security solutions within CI/CD pipelines, ensuring automation and efficiency
  • Minimize friction for engineering teams while implementing supply chain security solutions
  • Lead training and mentoring sessions to drive adoption of security tools
  • Cultivate a security-first mindset across the engineering organization
  • Establish long-term best practices for software supply chain security

Requirements

  • 3+ years of experience in SecOps, DevSecOps, or Security Engineering, with a strong focus on software supply chain security and secure development practices
  • Understanding of SBOM frameworks such as SPDX and CycloneDX and their role in securing software dependencies and mitigating supply chain risks
  • Hands-on experience with security tooling, including SCA, SAST, and container security
  • Expertise in CI/CD security automation
  • Capability to design and implement scalable security solutions, balancing risk mitigation with engineering efficiency
  • Strong problem-solving skills, with the ability to evaluate complex security challenges and define pragmatic, high-impact solutions
  • English proficiency at B2 level or higher

Benefits

With us you can:

  • Work on a flexible schedule remotely or from any of our comfortable offices or coworking spaces in Ukraine
  • Receive the necessary equipment to perform your work tasks
  • Change projects and technology stacks within EPAM
  • Gain experience in various business domains (Insurance, E-commerce, Healthcare, Finance, Travelling, Media, Artificial Intelligence, and more)
  • Relocation opportunities may be available for eligible candidates, depending on the role and openings at other EPAM locations
  • Participate in volunteer, charity programs and communities (both technical and interest-based)

We focus on your professional growth:

  • You can plan your individual career path together with your manager
  • Receive regular feedback from colleagues
  • Improve your English for free with certified teachers (Speaking Clubs, client interview preparation courses, etc.)
  • Get the opportunity to undergo free training and certification in AWS, GCP, or Azure Clouds
  • Use the internal E-learn training program (18,200+ specialized training and mentoring programs)
  • Access corporate accounts on LinkedIn Learning, Get Abstract and other partner resources
  • Study at EPAM Solution Architecture School with the instructors who are practicing architects
  • Develop as a leader, join Delivery Management, Resource Management, Leadership Essentials school and more
  • Participate in internal communities (500+ meetups, technical discussions, brainstorming sessions, online events and conferences annually)

What we offer:

  • Vacation and sick leave (including a sick leave without a medical certificate)
  • A wide range of Voluntary Medical Insurance programs providing both medical treatment and various preventive options (including sports activities)
  • Medical insurance for family members at corporate rates
  • Company support during significant life events (childbirth or adoption, marriage, etc.)
  • Support for psychological comfort: discounts on services from mental health specialists or coaches, thematic training
  • E-kids program - a free programming language training program for EPAMers' children

Skills

Apply

See also

Tailor your CV for this role?

We couldn't check your fit for this role — add a CV to your profile to see it next time.