Lead SecOps Engineer

We are looking for a Lead SecOps Engineer to join a team building security solutions that help organizations monitor, assess and improve the security posture of open-source software. The work focuses on a platform for unified visibility into open-source vulnerabilities and a solution that provides security ratings for open-source libraries, enabling better risk-based decisions across development teams. Responsibilities Contribution to the development and enhancement of solutions for open-source vulnerability monitoring and security rating Support and improvement of CI/CD pipelines and GitHub Actions–based workflows Application of DevSecOps and secure engineering practices throughout the software lifecycle Close collaboration with cross-functional teams to deliver scalable, reliable and secure solutions Contribution as a team player by collaborating, sharing knowledge and supporting overall product quality Requirements 7+ years of experience in DevOps or Site Reliability Engineering Skills in DevSecOps orchestration, Secure Software Development Life Cycle and security-as-code Knowledge of Software Composition Analysis and OSS license compliance Understanding of CVSS scoring, exploitability analysis and vulnerability remediation strategies Hands-on experience securing GitHub Actions workflows and integrating security gates into CI/CD pipelines Expertise in CI/CD, Kubernetes and Security Hardening Proficiency in Security Testing Tools, Security Assessment and Vulnerability Management Strong communication, ownership mindset and ability to work effectively in a team environment English proficiency at B2 level or higher Nice to have Familiarity with Google Cloud Platform Background in Open Source Software Development We offer We gather like-minded people: Engineering community of industry professionals Friendly team and enjoyable working environment Flexible schedule and opportunity to work remotely within Poland Chance to work abroad for up to 60 days annually Business-driven relocation opportunities We provide growth opportunities: Outstanding career roadmap Leadership development, career advising, soft skills, and well-being programs Certification (GCP, Azure, AWS) Unlimited access to LinkedIn Learning, Get Abstract, Cloud Guru English classes We cover it all: Stable income (Employment Contract or B2B) Participation in the Employee Stock Purchase Plan Benefits package (health insurance, multisport, shopping vouchers) Strategically located offices featuring entertainment and relaxation zones, table tennis and football, free snacks, fantastic coffee, and more Referral bonuses Corporate, social and well-being events Please, note: The set of bonuses might vary based on the role you apply for – specifics will be discussed with our recruiter during the general interview. We will reach out to selected candidates exclusively. EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.