Overview

We are seeking a Senior Product Security Specialist to join our team, dedicated to ensuring the security of our products and driving best practices within our software development lifecycle.


As a key member of our security team, you will play a critical role in shaping our security processes, technologies, and culture.

Responsibilities

  • Facilitate threat modeling exercises and training sessions across teams
  • Lead workshops and discussions with diverse stakeholders to address security concerns effectively
  • Collaborate with first-line teams to refine development pipelines with optimal security tools and techniques
  • Provide subject matter expertise on updating current activities and integrating new technologies into the SSDLC
  • Partner with Product teams to architect secure products and features that align with security standards
  • Train and empower Security Champions within Product teams
  • Support teams by advising on security-conscious decisions that align with development goals
  • Facilitate end-to-end vulnerability management and remediation tracking

Requirements

  • Proficiency in threat and risk modeling, preferably using STRIDE assessments
  • At least 5 years of experience in Software Development Lifecycle, Development Security, Security Engineering, Security Architecture, or Software Development
  • Knowledge of CI/CD Security, SIEM, and PAM with preference for CyberArk
  • Experience in implementing and operating build automation and Cloud Security
  • Familiarity with identity and access management principles
  • Understanding of SSDLC security technologies such as GitHub or Azure
  • Relevant industry certifications (CISSP, CSSLP, CCSK)
  • Fluent communication skills in English at a B2+ level

Nice to have

  • Familiarity with privacy threat modeling methods like LINDDUN
  • Background in development or DevSecOps
  • Knowledge of SAST/DAST/IAST/RASP solutions

Romania

We believe that the greatest strength of the company is its people. EPAM is fully committed to help its employees to reach their full potential and achieve their professional goals through continues learning. With this in mind, we would like to introduce to you few of the many opportunities and services which we believe will help you expand your current knowledge:

  • Full access to cutting-edge tools and technologies
  • Competitive compensation depending on experience and skills
  • All-around Social package: professional & soft skills training, medical & family care programs, sports
  • Free English classes
  • Unlimited access to LinkedIn learning solutions
  • Continuous experience exchange with experts and professionals worldwide
  • Friendly team and comfortable working environment
  • Engineering, corporate, and social events within and outside the Company
  • Flexible working schedule
  • Opportunities for self-realization

[epamgdo] Romania (About EPAM)

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.