Senior / Lead Application Security Engineer

We are looking for an experienced Application Security Engineer to ensure the architectonic safety of our digital portfolio. You will work with our Security Architect to implement secure coding guidelines, conduct thorough code reviews and facilitate threat modeling in the medical product development lifecycle.

Join our team to collaborate with a leading client in the healthcare domain!
#April-Referral-Digest-LT

What You'll Do

• Drive Security Architecture & Solutions in collaboration with the Security Architect for our core digital portfolio and future products
• Conduct extensive Threat Modeling and analyze weaknesses within the system
• Work hand-on-hands with Security Architecture embedded Security-by-Design and Threat Modeling practices into the product development cycle
• Implement secure coding practices and provide secure libraries, ensuring the software is safeguarded at a foundational level
• Guide on secure coding practices and conduct thorough code reviews, guiding the development team in addressing potential security issues
• Define global security models across core business verticals, ensuring secure integration with backend systems
• Develop appropriate technical and organizational security controls to mitigate identified risks, including encryption, access controls, and authentication mechanisms
• Execute Security-By-Design principles and contribute to driving Product Security Excellence
• Conduct security awareness training for employees developing, deploying, and maintaining medical devices

• Bachelor's Degree in Computer Science, Cybersecurity or equivalent experience
• 5+ years of experience in Application Security, preferably in the medical or healthcare sector
• Relevant certifications such as Certified Application Security Engineer (CASE) or similar would be highly advantageous
• Expertise in secure coding practices and in-depth knowledge of at least one programming languages, including but not limited to .NET, Python and JavaScript
• Familiarity with threat modeling methodologies and tools such as STRIDE, DREAD or Attack Trees
• Advanced interpersonal skills with the ability to articulate complex technical concepts to non-technical personnel and conduct practical security awareness training
• Background with common security libraries, security controls and common security flaws
• Solid understanding of network access, identity, access management, applied cryptography, network security methodologies and secure software development methodologies
• Knowledge of identifying and understanding the most common application security vulnerabilities (OWASP Top 10)
• Skills in more than one of the following areas: API security; Cryptography; Identity and Access Management; Application Security practices

• Salary range 3600-6500 EUR gross, based on your experience and interview results
• Outstanding career development roadmap to accelerate your journey
• Engineering community of industry's top professionals
• Certification and mentoring programs, training, and unlimited access to LinkedIn Learning
• Innovative solutions delivery to the world's industry leaders
• Regular assessments and salary reviews
• Bonuses for participating in the referral program
• Participation in the Employee Stock Purchase Plan
• Flexible schedule and opportunity to work remotely from any place in Lithuania
• Friendly team and enjoyable working environment
• Relocation within offices in 50+ countries with throughout support for you and your family
• Three additional vacation days and four trust days a year (sick leave without a medical certificate)
• Private health insurance and corporate discounts for family members

• As consultants, designers, architects, engineers and trainers, at EPAM we focus on building long-term partnerships with our clients, enabling them to reimagine their businesses through a digital lens. We help our clients become faster, more agile and more adaptive enterprises, by delivering solutions through best-in-class engineering, strategy, design, consulting, education and innovation services