EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture.

Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.

We are looking for a Lead Product Owner to drive end-to-end delivery of security vulnerability remediation across a web application ecosystem. You will align stakeholders, translate security findings into actionable backlog items, and ensure timely validation and release.

Responsibilities

- Own and prioritize the security vulnerability remediation backlog
- Coordinate remediation delivery across engineering, QA, security, and business stakeholders
- Translate security findings into clear requirements, backlog items, and acceptance criteria
- Drive vulnerabilities through analysis, remediation, testing, validation, release, and closure
- Prioritize work by severity, business risk, deadlines, and technical dependencies
- Track progress, risks, blockers, dependencies, and remediation commitments
- Coordinate validation of findings from Veracode or similar SAST/SCA/DAST tools
- Facilitate planning and Agile ceremonies to ensure delivery commitments are met
- Coordinate release planning and regression and security validation
- Maintain clear status reporting and escalate critical risks or delays
- Support AI-assisted practices to improve analysis, remediation, testing, and team productivity

Requirements





- 5+ years of experience as a Product Owner or Business Analyst
- Experience in backlog management, prioritization, and delivery planning
- Strong leadership skills coordinating engineering, QA, security, and business stakeholders
- Strong project management skills with dependency, risk, and commitment tracking
- Solid technical knowledge of web application security, OWASP risks, and remediation workflows
- Hands-on familiarity with SAST/SCA/DAST tools such as Veracode or similar
- Proficiency with Jira and Confluence for requirements, planning, and status reporting
- Strong analytical skills to translate findings into requirements and acceptance criteria
- Strong communication skills for clear status updates and proactive escalation
- Knowledge of GenAI for BA Productivity & SDLC, Product Management, Project Management, Project Team Management, and Stakeholder Management
- Upper-Intermediate English (B2) proficiency

Nice to have

- Agile and Scrum facilitation experience
- Understanding of common security vulnerabilities and remediation best practices

We offer

- International projects with top brands
- Work with integral teams of highly skilled, diverse peers
- Healthcare benefits
- Employee financial programs
- Paid time off and sick leave
- Upskilling, reskilling and certification courses
- Unlimited access to the LinkedIn Learning library and 22,000+ courses
- Global career opportunities
- Volunteer and community involvement opportunities
- EPAM Employee Groups
- Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn

EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.

📌 Lead Product Owner (Colombia)
🏢 EPAM Systems
📍 Colombia