Lead Application Security Engineer — Threat & Vulnerability Management (AI Focus)

EPAM Systems is seeking a Lead Application Security Engineer to drive secure-by-design engineering for agent code and pipelines while owning vulnerability management for AI workloads. This role ensures that agentic AI development is secure and efficient, focusing on embedding security practices into the development lifecycle.

Responsibilities:

• Embed SAST DAST and SCA into agent CI/CD pipelines
• Build and maintain an AI/LLM software bill of materials (SBOM) capability
• Lead threat modeling for agents against the OWASP LLM Top-10 and Agentic Top-10
• Define and enforce vulnerability-management SLAs for AI workloads
• Establish secure-SDLC guardrails for maker and developer teams

Requirements:

• 5+ years of experience in application security engineering
• Background in SAST, DAST and SCA tooling and triage
• Expertise in threat modeling with understanding of LLM/agent attack surfaces including prompt injection, tool abuse and data exfiltration
• Familiarity with AI/LLM supply-chain risk and SBOM practices
• Background in secure SDLC and DevSecOps pipeline integration
• Skills in Python scripting and automation for security tooling integration
• Relevant certifications (e.g., GWAPT, CSSLP, OSCP)