We are looking for a Lead-level Security Engineer to strengthen container and supply chain security through automation and hands-on remediation. You will harden container images, secure Kubernetes workloads, and build tooling that turns scan results into tested fixes.

Responsibilities

- Build and maintain hardened container base images with automated testing for development and production use
- Implement Kubernetes security controls including runtime monitoring, network policies, and admission policies
- Secure software supply chain workflows across build pipelines, registries, and infrastructure configuration
- Create and evolve security automation tools and services using Go
- Triage vulnerabilities from pentests, SAST, DAST, and SCA to separate real risk from noise
- Partner with engineering teams to prioritize findings and commit remediation patches and dependency upgrades
- Automate alert grouping and first-pass fix drafting using Gen AI assisted development and MCP-based integrations

Requirements

- 5+ years of security engineering experience in DevSecOps and security automation
- Strong leadership skills to partner with engineering teams and drive remediation work to completion
- Proven project ownership to write, test, and commit patches rather than only filing tickets
- Advanced Go (Golang) skills to build security tooling, CLIs, and services
- Strong AWS security knowledge including IAM and container services such as EKS and ECS
- Solid CI/CD pipeline experience with automated testing and security checks
- Deep container security expertise including hardened base images and attack surface reduction




- Hands-on Kubernetes security skills including network policies, runtime controls, and admission policies
- Strong vulnerability management skills across SAST, DAST, SCA, and pentest findings
- Practical infrastructure-as-code skills with Terraform for secure configurations
- Applied Gen AI assisted development skills with disciplined review and testing of generated code
- Upper-Intermediate English skills (B2) for clear written and verbal collaboration

Nice to have

- Model Context Protocol (MCP) integration experience for security automation
- Microsoft Azure experience securing container platforms such as AKS
- Node.js development experience supporting security tooling
- Supply chain security expertise with SLSA, in-toto, Sigstore/Cosign, and SBOMs

We offer

- International projects with top brands
- Work with global teams of highly skilled, diverse peers
- Healthcare benefits
- Employee financial programs
- Paid time off and sick leave
- Upskilling, reskilling and certification courses
- Unlimited access to the LinkedIn Learning library and 22,000+ courses
- Integral career opportunities
- Volunteer and community involvement opportunities
- EPAM Employee Groups
- Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn

EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.

📌 Senior Security Engineer (Colombia)
🏢 EPAM Systems
📍 Colombia