Senior Security Engineer

We are seeking a Senior Security Engineer to serve as a Security Champion within our development teams.
The individual must have extensive security experience and the ability to help business line owners comply with our company's security policies and guidelines. This role requires an individual who has expertise in Information Security and Enterprise Architecture, strong interpersonal skills, the ability to lead security remediation efforts, the capability to influence internal leaders, maintain positive and productive relationships, and manage multiple initiatives concurrently.
This position offers remote setup with the flexibility to work from any location in Kazakhstan, whether it's your home or well-equipped offices in Astana, Almaty or Karaganda.

#LI-DNI

Responsibilities

• Lead application security remediation efforts across a multitude of applications
• Support development teams in Vulnerability Management, Security Incident Management, Risk Management, and Audit processes
• Collaborate with stakeholders to understand security policy requirements and convert these into technical guidance for application owners
• Act as a liaison between the security/EA organization and business stakeholders
• Cooperate with international governance groups to implement security policies
• Conduct security assessments and audits on applications
• Educate and influence employees on security best practices, ensuring compliance with industry regulations and standards (e.g., GDPR, HIPAA)

Requirements

• 3+ years of experience in Security Engineering
• Extensive knowledge and expertise in Application Security and Enterprise Architecture
• Relevant industry certifications, such as CISSP, are highly desirable
• Experience leading application security remediation efforts
• Experience in Vulnerability Management, Security Incident Management, Risk Management, and Audit processes
• Familiarity with GDPR, HIPAA, and other industry regulations and standards
• Excellent collaboration, communication, and influential skills
• Ability to conduct thorough security assessments and audits
• Experience working with a globally distributed team is an advantage

We offer

• We connect like-minded people: :
  • Delivering innovative solutions to industry leaders, making a global impact
  • Enjoyable working environment, whether it is the vibrant office or the comfort of your own home
  • Opportunity to work abroad for up to two months per year
  • Relocation opportunities within our offices in 55+ countries
  • Corporate and social events
• We invest in your growth: :
  • Leadership development, career advising, soft skills and well-being programs
  • Certifications, including GCP, Azure and AWS
  • Unlimited access to LinkedIn Learning, Get Abstract, O'Reilly
  • Free English classes with certified teachers
  • Discounts in local language schools, including online courses for the Kazakh language
• We cover it all: :
  • Participation in the Employee Stock Purchase Plan
  • Monetary bonuses for engaging in the referral program
  • Medical & family care package
  • Six trust days per year (sick leave without a medical certificate)
  • Coverage of psychology sessions of your choice
  • Benefits package (sports activities, a variety of stores and services)

EPAM is a team of technologists and innovators united by a passion for technology. In Kazakhstan, we operate across all cities with offices in Astana, Almaty, and Karaganda and work with the world's leading companies from different industries. In 2023, EPAM received the Export Excellence Award at the esteemed Digital Bridge Awards, showcasing our commitment to excellence and innovation.