Responsibilities

• Perform and analyze vulnerability testing
• Document security findings and directly assist developers with reasonable methods to secure
• Directly assist developers hands-on with code details and assist with mitigation routes
• Regularly monitor the security community for public-facing security issues, as well as to learn new tactics that can be used in testing
• Attend and participate in application projects and change management committees. This includes interacting with business units and technical teams to understand what is coming and how their projects can be more secure from the beginning
• Fully define and follow a security review process to ensure an automated and repeatable process is managed
• Use security standards and implementation configurations, as well as common security frameworks
• Align with architects and development teams for a mission of secure design
• Train developers and junior application security engineers on weaknesses to avoid
• Actively participate and lead security team meetings that facilitate secure design
• Focus on application security that observes compliance –Sarbanes-Oxley Act (SOX), etc. – and other privacy laws
• Respond to and handle service and escalation tickets within SLA expectations
• Drive security efficiencies, enabling security team members to work on more advanced tasks

Requirements

• 6+ years of development work experience
• Hands on development experience with Java and Spring Framework
• Vulnerability and penetration-testing skills
• Solid understanding of network and web protocols
• Experience with security of intra-company and third-party APIs
• Experience with dynamic and static scanning tools

Benefits

• Extended Healthcare with Prescription Drugs, Dental and Vision Insurance (Company Paid)
• Life and AD&D Insurance (Company Paid)
• Employee Assistance Program (Company Paid)
• Unlimited access to LinkedIn learning solutions
• Long-Term Disability
• Registered Retirement Savings Plan (RRSP) with company match
• Paid Time Off
• Critical Illness Insurance
• Employee Discounts
• Employee Stock Purchase Program

About EPAM

• EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential