Senior Application Security Engineer

We are looking for an experienced Application Security Engineer to ensure the architectonic safety of our digital portfolio.

It is a fully remote position offering you the flexibility to work from any location in Poland, whether it's your home or one of our well-equipped offices in Gdansk, Katowice, Krakow, Lodz, Warsaw, or Wroclaw.

SEE YOURSELF IN THIS ROLE

You will work hand-in-hand with our Security Architect to implement secure coding guidelines, conduct thorough code reviews, and facilitate threat modeling in the medical product development lifecycle.

Our customer is a leading provider of Dialysis/Renal Care products & services. The increasing connectivity of medical devices and the evolving threat landscape necessitate a robust and proactive approach to product security.

• Driving Security Architecture & Solutions in collaboration with the Security Architect for our core digital portfolio and future products
• Conduct extensive Threat Modeling and analyze weaknesses within the system
• Work hand-on-hands with Security Architecture embedded Security-by-Design and Threat Modeling practices into the product development cycle
• Implement secure coding practices and provide secure libraries, ensuring the software is safeguarded at a foundational level
• Provide guidance on secure coding practices and conduct thorough code reviews, guiding the development team in addressing potential security issues
• Define global security models across core business verticals, ensuring secure integration with backend systems
• Develop appropriate technical and organizational security controls to mitigate identified risks, including encryption, access controls, and authentication mechanisms
• Execute Security-By-Design principles and contribute to driving Product Security Excellence
• Conduct security awareness training for employees developing, deploying, and maintaining medical devices

• Bachelor's Degree in Computer Science, Cybersecurity OR equivalent experience
• 5+ years of experience in Application Security, preferably in the medical or healthcare sector
• Relevant certifications such as Certified Application Security Engineer (CASE) or similar would be highly advantageous
• Expertise in secure coding practices and in-depth knowledge of at least one programming languages, including but not limited to .NET, Python, and JavaScript
• Familiarity with threat modeling methodologies and tools such as STRIDE, DREAD, or Attack Trees
• Advanced interpersonal skills with the ability to articulate complex technical concepts to non-technical personnel and conduct effective security awareness training
• Expertise with common security libraries, security controls, and common security flaws
• Security Knowledge: Solid understanding of network access, identity, access management, applied cryptography, network security methodologies, and secure software development methodologies
• Knowledge and experience identifying and understanding the most common application security vulnerabilities (OWASP Top 10)
• Deep expertise with more than one of the following areas: API security; Cryptography; Identity and Access Management; Application Security practices

• We gather like-minded people:
  • Friendly team and enjoyable working environment
  • Engineering community of industry's professionals
  • Flexible schedule and opportunity to work remotely within Poland
  • Chance to work abroad for up to 60 days annually
  • Relocation within our 50+ offices
• We provide growth opportunities:
  • Outstanding career roadmap
  • Leadership development, career advising, soft skills and well-being programs
  • Certification (GCP, Azure, AWS)
  • Unlimited access to LinkedIn Learning, Get Abstract, O'Reilly and Cloud Guru
  • Language classes on English and Polish for foreigners
• We cover it all:
  • Stable income (Employment Contract)
  • Participation in the Employee Stock Purchase Plan
  • Referral bonuses
  • Benefits package (health insurance, multisport, shopping vouchers)
  • Strategically located offices featuring entertainment and relaxation zones, table tennis and football, free snacks, fantastic coffee, and many more
  • Corporate and social events
• We may contact chosen candidates only

• EPAM Systems Inc. (EPAM) is a leading digital transformation services and product engineering company. Since 1993, we have used our software engineering expertise to become a leading global provider of digital engineering, cloud and AI-enabled transformation services, as well as a leading business and experience consulting partner for global enterprises and ambitious startups. We address our clients' transformation challenges by fusing EPAM Continuum's integrated strategy, experience and technology consulting with our 30+ years of engineering execution to speed our clients' time to market and drive greater value from their innovations and digital investments. Learn more at www.epam.com