Senior Application Security Engineer İş İlanı

We are looking for a Senior Application Security Engineer to design, implement, and operate security-tooling integrations across certificate management, secrets management, privileged access, and vulnerability detection platforms. In this role, you will work closely with SOC, IAM, and Network Architecture teams to embed security controls into the platform's infrastructure and CI/CD pipelines, ensuring robust audit, compliance, and governance practices across the organization. Responsibilities Implement and operate the certificate-management integration with Venafi: issuance workflows and distribution across F5, Azure Key Vault, and VM/OS certificate stores, including renewal/rotation automation Build and maintain the secrets-management integration (OpenBao, Azure Key Vault): configuration-as-code for authentication methods, namespaces, mounts, policies, and dynamic secrets engines (database, cloud) Implement the Privileged Access Management (PAM) "break-the-glass" workflow: time-boxed grant requests, approval-chain automation, session recording hooks, and audit-trail logging Build SIEM and WAF alert-integration pipelines (alert feed ingestion, entity correlation, severity views) and the Vulnerability Dashboard, integrating findings from SAST/DAST/SCA/IAST/ASPM scanners Implement Policy as Code checks (OPA/Conftest, Azure Policy): baseline policy library, CI gate integration, and exemption/waiver workflow automation Support the platform's Auth/RBAC configuration from a security-tooling perspective (Entra ID, Active Directory, GPOs, M365 groups), ensuring audit-retention settings are correctly applied Work with the Network Architect to translate firewall/WAF policy requirements (PaloAlto, F5, Cloudflare) into the SIEM/WAF alert integration and Vulnerability Dashboard Support SOC and IAM teams during security reviews, preparing evidence and configuration details for security-sensitive integrations Troubleshoot and remediate security-tooling issues during Implementation and Adoption Requirements 3+ years of experience implementing security-tool integrations: certificate-lifecycle management (Venafi or equivalent), secrets management (OpenBao, Key Vault), and PAM workflows Experience with SIEM/SOAR alert pipelines and vulnerability-management tooling (SAST/DAST/SCA/IAST/ASPM) Experience implementing Policy as Code checks (OPA/Conftest, Azure Policy) and CI/CD gate enforcement Knowledge of enterprise identity and access management (Entra ID, Active Directory, RBAC/claims-based authorization) Familiarity with firewall/WAF concepts (PaloAlto, F5, Cloudflare) sufficient to define alerting/finding-correlation requirements Ability to work within governance-heavy, security-sensitive change-control processes Nice to have Experience integrating security tooling with a Backstage-based (or comparable) developer portal Familiarity with supply-chain security practices (artifact signing/SBOM, e.g., cosign/Sigstore) Knowledge of Conditional Access automation (Entra ID/Microsoft Graph API) Experience with Infrastructure as Code (Terraform/OpenTofu) for implementing security modules We offer CONTINUOUS UPSKILLING, LEARNING & DEVELOPMENT Diversity of tasks and projects Assessment center for objective review of competency level Personal development plan Mentoring programs and leadership development Certification and professional development support Access to learning platforms including more than 2,500 internal courses English courses taught by certified teachers CORPORATE BENEFITS Extra leave days Referral bonuses COMPENSATION PACKAGE Competitive compensation paid in USD Regular salary and performance reviews MEDICAL & HEALTHCARE Private health insurance Well-being events WORKING ENVIRONMENT Recreation areas and kitchens Tea, coffee and snacks Sports equipment and game consoles IT Equipment Microsoft’s Software Assurance Home Use Program (HUP) Please note that our Talent Attraction Team reviews applications and CVs submitted in English. EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.