Senior Application Security Engineer

Senior Application Security Engineer 🏢 EPAM Systems 📍 Remote · Armenia 🕐 Full Time About the role We are looking for a Senior Application Security Engineer to reduce security risk across web applications and APIs throughout the software development lifecycle. You will partner closely with engineering teams to assess application security, perform secure design and code reviews, validate and prioritize findings, and drive remediation to closure. What you’ll do 🗂 • Perform security assessments of web applications, APIs, services, and supporting components • Facilitate threat modeling and review architectures and technical designs from a security perspective • Conduct secure code reviews and identify vulnerabilities and insecure implementation patterns • Validate findings from automated tools, reduce false positives, and prioritize issues based on exploitability and business impact • Provide clear, actionable remediation guidance and secure implementation recommendations • Track findings through remediation and retesting in collaboration with development teams What we’re looking for 🔎 • Hands-on experience in application security or product security • Strong knowledge of authentication, authorization, session management, input validation, cryptography, secrets handling, and data protection • Ability to read and understand code in at least one programming language (e.g., Java, C#, JavaScript/TypeScript, Python, or Go) • Strong communication skills and the ability to provide practical guidance to engineering teams • Experience with DevSecOps practices, including integrating application security tools and security gates into CI/CD pipelines • Familiarity with cloud application security concepts (AWS, Microsoft Azure, or Google Cloud) How to apply 🙋 Open on ITA Jobs and apply → More IT vacancies in Armenia, matched to your CV — jobs.ita.am/vacancies #SoftwareEngineering #Senior #Appsec