DevSecOps Engineer

Description

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.

EPAM is looking for a dedicated DevSecOps Engineer to automate and optimize our development processes and ensure secure CI / CD pipelines. Working closely with our Security Architect, your main responsibility would be to reinforce our security posture across our development teams and digital portfolio.At EPAM, you will work with the most recent advancements in tech, ensuring that our innovative solutions stay at the cutting edge of technology trends while also being safe and reliable. Our DevSecOps team is composed of globally recognized experts who take pride in driving real impact in the tech security domain.We value flexibility and offer a modern approach to work with a hybrid model. You can enjoy the privilege of working from home, backed by occasional visits to client sites or our office. This is an exceptional opportunity to lead and learn, while shaping the future of secure technology deployment.

Not found

Responsibilities

• Collaborate with the Security Architect to drive the Security Architecture & Solutions for our core digital portfolio and future digital products
• Automate repetitive tasks and implement secure CI / CD pipelines, enhancing productivity and reducing errors
• Own the implementation and continuous improvement of security tooling across various areas including static / dynamic analysis, dependency scanning, and secrets detection
• Implement appropriate technical and organizational security controls to mitigate identified risks, with a focus on automating these measures wherever possible
• Promote and facilitate Security-By-Design principles across the development team, bridging the gap between operations and security
• Implement Infrastructure as Code (IaC) security measures, protecting integral aspects of our infrastructure and ensuring secure deployments
• Embed security within the DevOps lifecycle, including the design and execution of signed image verification systems to ensure the authenticity and integrity of images
• Conduct ongoing security training for the development team to ensure awareness and compliance

Requirements

We offer