Application Security Architect - Remote - EPAM Systems

If you are looking for a high impact Application Security Architect role with a global leader in digital transformation, EPAM is the perfect next step in your career! As an EPAMer, you’ll have the opportunity to work with a supportive team, on a variety of interesting projects for some of the biggest brands in the world. Are you ready for the next step in your career journey? Apply now!

We are seeking an accomplished Application Security Architect to join our team and play a pivotal role in ensuring the security of digital products. As an Application Security Architect, you will have the opportunity to shape and implement advanced security measures, working at the forefront of technology to fortify applications against vulnerabilities and breaches. If you possess a deep understanding of security best practices, a knack for risk assessment, and a talent for collaborating with cross-functional teams, we invite you to embark on this exciting journey with us to create secure, innovative solutions, all aimed at bolstering security processes.

Responsibilities

• Work with development teams to ‘shift security left’ and integrate security best practices into the software development lifecycle

• Find gaps and pain points in current processes and make recommendations

• Perform threat modeling, security architecture review, and risk assessments for applications

• Provide security requirements to the development teams in the form of security user stories and contribute towards the user stories database

• Create and maintain security standards, guidelines, and documentation for development teams to follow

• Develop tools and processes to assist in modeling, analysis, detection, and prevention of security threats

• Design and follow a process to help evaluate third-party vendors from a security perspective

• Make necessary updates to the Product Inventory

• Participate in the evaluation and selection of security tools and technologies that align with the organizations security goals

• Collaborate with cross-functional teams to prioritize and address security-related issues efficiently

• Develop and deliver security training programs for developers and other stakeholders to increase awareness of secure coding practices

Requirements

• Proven experience as an Application Security Architect or in a similar security-focused role (e.g., DevSecOps background)

• In-depth knowledge of software development methodologies and secure coding practices

• Strong understanding of common application vulnerabilities, attack vectors, and mitigation techniques

• Experience with security tools and technologies such as static and dynamic analysis tools, web application firewalls, etc

• Proficiency in programming languages commonly used in web development (e.g., Java, Python, JavaScript)

• Familiarity with security standards and frameworks (e.g., OWASP, NIST, ISO 27001)

• Hands-on experience with secure design patterns and architecture reviews

• Excellent communication skills to collaborate effectively with technical and non-technical stakeholders

• Strong analytical and problem-solving skills to identify and address complex security issues

• Ability to work independently and in a team, manage priorities, and deliver high-quality results within deadlines

Nice to have

• Experience with Cloud Security

• Hands-on experience in Security Testing

Benefits

• Medical, Dental and Vision Insurance (Subsidized)

• Health Savings Account

• Flexible Spending Accounts (Healthcare, Dependent Care, Commuter)

• Short-Term and Long-Term Disability (Company Provided)

• Life and AD&D Insurance (Company Provided)

• Employee Assistance Program

• Unlimited access to LinkedIn learning solutions

• Matched 401(k) Retirement Savings Plan

• Paid Time Off – the employee will be eligible to accrue 15-25 paid days, depending on specific level and tenure with EPAM (accrual eligibility may change over time)

• Paid Holidays - nine (9) total per year

• Legal Plan and Identity Theft Protection

• Accident Insurance

• Employee Discounts

• Pet Insurance

• Employee Stock Purchase Program

• If otherwise eligible, participation in the discretionary annual bonus program

• If otherwise eligible and hired into a qualifying level, participation in the discretionary Long-Term Incentive (LTI) Program