Senior AI Security Engineer

Senior AI Security Engineer 🏢 EPAM Systems 📍 Remote · Armenia 🕐 Full Time About the role We are looking for a Senior AI Security Engineer to secure software across the full development lifecycle. This role embeds security into design, code, build, and release; operates application security tooling and pipelines; partners with engineering to drive remediation; and applies AI both to accelerate AppSec work and to secure AI- and LLM-powered applications. What you’ll do 🗂 • Perform and facilitate threat modeling, architecture security reviews, and design reviews for applications, services, and APIs • Conduct secure code reviews (manual and AI-assisted) and advise developers on secure coding patterns and remediation • Implement, configure, tune, and operate application security tooling, including SAST, DAST, IAST, SCA, secrets scanning, and IaC scanning, integrated into CI/CD pipelines • Triage, validate, prioritize, and reduce false positives in security findings, and partner with development teams to track issues through to remediation • Define, implement, and maintain security gates and policies in CI/CD pipelines that balance risk reduction with developer velocity • Secure the software supply chain, including dependency and open-source risk management, SBOM generation, artifact integrity and signing, and build pipeline hardening What we’re looking for 🔎 • Strong understanding of common application vulnerability classes and mitigations, including the OWASP Top 10, and of secure coding principles • Practical experience with application security tooling, such as SAST, DAST, SCA, and secrets scanning, and integrating it into CI/CD • Working knowledge of at least one programming language (for example, Python, Java, C#, JavaScript/TypeScript, or Go) sufficient to read code and assess vulnerabilities • Familiarity with cloud application security concepts across at least one major cloud platform such as Azure, AWS, or GCP • Good communication skills and the ability to explain security risks, technical decisions, and remediation plans to both technical and non-technical stakeholders • Experience with Infrastructure as Code and policy-as-code security tools such as Terraform, Bicep, ARM templates, OPA, Checkov, or Trivy How to apply 🙋 Open on ITA Jobs and apply → More IT vacancies in Armenia, matched to your CV — jobs.ita.am/vacancies #SoftwareEngineering #Senior #NetworkSecurity