We are seeking an experienced Senior DevSecOps Engineer to integrate security tools into our CI/CD pipelines, with a particular focus on infrastructure testing and secret scanning. This role also involves conducting training sessions to enhance the team’s security expertise. You will play a key role in embedding security practices into our development cycle and improving the overall security of our systems.

If you're ready to make an impact in a dynamic environment, we want to hear from you!

Responsibilities

• Implement and optimize security tools within CI/CD pipelines for infrastructure testing and secret scanning
• Ensure seamless integration of security measures at all stages of the development process
• Maintain and enhance operational security practices to prevent, detect, and respond to security incidents
• Configure and manage monitoring solutions using Splunk for continuous assessment of infrastructure health and security
• Develop and deliver training programs on security best practices and tool usage for the team
• Manage training sessions using SAPGoat (our training vulnerable application) and ATMan (training management application)
• Work closely with development and operations teams to ensure security integration throughout the software lifecycle
• Provide recommendations for vulnerability remediation and overall security improvements

Requirements

• Strong experience in security operations and infrastructure monitoring
• Professional proficiency with Splunk for security monitoring and analytics
• Proven experience integrating and managing tools for infrastructure testing and secret scanning
• Knowledge of CI/CD pipelines and implementing security measures within them
• Experience deploying and managing applications in Kubernetes environments
• Terraform Proficiency
• Hands-on experience using Terraform for infrastructure automation and management
• Ability to create effective training materials and conduct engaging training sessions
• Excellent communication skills for collaborating with various teams and clearly explaining security concepts
• B2+ English level proficiency

Nice to have

• Ability to automate tasks using Python or Go
• Deep understanding of integrating security into the software development lifecycle

We offer

• We gather like-minded people:
  • Engineering community of industry professionals
  • Friendly team and enjoyable working environment
  • Flexible schedule and opportunity to work remotely within Poland
  • Chance to work abroad for up to 60 days annually
  • Relocation within our 50+ offices
• We provide growth opportunities:
  • Outstanding career roadmap
  • Leadership development, career advising, soft skills, and well-being programs
  • Certification (GCP, Azure, AWS)
  • Unlimited access to LinkedIn Learning, Get Abstract, O’Reilly, Cloud Guru
  • Language classes in English and Polish for foreigners
• We cover it all:
  • Stable income (Employment Contract or B2B)
  • Participation in the Employee Stock Purchase Plan
  • Benefits package (health insurance, multisport, shopping vouchers)
  • Strategically located offices featuring entertainment and relaxation zones, table tennis and football, free snacks, fantastic coffee, and more
  • Referral bonuses
  • Corporate, social and well-being events
• Please, note:
  • The set of bonuses might vary based on the role you apply for – specifics will be discussed with our recruiter during the general interview
  • We will reach out to selected candidates exclusively

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.