We are looking for a Senior Security Engineer to strengthen the software supply chain and container security through practical automation and hands-on remediation. You will partner with engineering teams to harden Kubernetes workloads, improve CI/CD guardrails, and ship tested fixes.

Responsibilities

- Build and maintain hardened container base images for development and production use
- Implement Kubernetes security controls including runtime monitoring, network policies, and admission controllers
- Embed security checks and policy gates into CI/CD pipelines to deliver fast, automated feedback
- Secure software supply chain workflows across build systems, registries, and infrastructure-as-code
- Write and maintain security automation utilities and services in Go
- Triage vulnerabilities from pentests, SAST, DAST, and SCA and separate real risks from noise
- Partner with engineering teams to prioritize issues and commit remediation patches and dependency upgrades
- Automate alert grouping and first-pass fixes using LLMs and Model Context Protocol integrations
- Review and test all generated code before merging changes into codebases

Requirements

- 3+ years of security engineering experience in SaaS environments with DevSecOps and automation focus
- Proven leadership ability to partner with engineering teams and drive remediation to completion
- Hands-on project experience delivering hardened container images and Kubernetes security controls in production
- Strong Go (Golang) programming skills for building security tooling, CLIs, or services
- Solid CI/CD pipeline experience with automated testing and security checks




- Deep AWS security knowledge including IAM and container services such as EKS and ECS
- Practical Kubernetes security expertise including network policies, runtime controls, and admission controllers
- Strong vulnerability management skills across SAST, DAST, pentesting, and SCA with false-positive triage
- Terraform infrastructure-as-code skills for cloud and security configurations
- Strong communication skills to explain findings and provide actionable fixes to engineers
- Careful verification mindset when using AI coding assistants and LLM-driven automation
- Upper-Intermediate English proficiency (B2, Upper-Intermediate)

Nice to have

- Model Context Protocol (MCP) integration experience for security automation
- Supply chain security experience with SLSA, in-toto, Sigstore/Cosign, and SBOMs (SPDX or CycloneDX)
- Microsoft Azure (AKS) experience securing container workloads
- Node.js or TypeScript development experience

We offer

- International projects with top brands
- Work with global teams of highly skilled, diverse peers
- Healthcare benefits
- Employee financial programs
- Paid time off and sick leave
- Upskilling, reskilling and certification courses
- Unlimited access to the LinkedIn Learning library and 22,000+ courses
- General career opportunities
- Volunteer and community involvement opportunities
- EPAM Employee Groups
- Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn

EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.

📌 Senior Security Engineer (Colombia)
🏢 EPAM Systems
📍 Colombia