> Markdown version of [/jobs/ext/382156-senior-security-engineer](https://www.wearedevelopers.com/jobs/ext/382156-senior-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Security Engineer

- **Company:** EPAM Systems, Inc.
- **Location:** Berlin, Germany (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Github, Open Source Technology, Systems Development Life Cycle, Software Engineering, Systems Integration, Software Vulnerability Management, Free and Open-Source Software, Devsecops, Software Library, Security Orchestration, Automation & Response
- **Published:** June 11, 2026
- **Apply:** https://de.indeed.com/viewjob?jk=d2790b29513334e8

## About the Role

Do you have experience in SDLC?, * Strong background in security engineering, DevSecOps orchestration and security-as-code

 * Knowledge of open-source security concepts, including Software Composition Analysis and license compliance
 * Understanding of vulnerability management processes, CVSS scoring and remediation strategies
 * Hands-on experience securing CI/CD pipelines with GitHub Actions or similar tools
 * Familiarity with common security standards, secure SDLC and open-source security frameworks
 * Excellent collaboration, communication and problem-solving skills

Nice to have

 * Knowledge of OSS security monitoring platforms and compliance tools
 * Experience in creating security automation scripts and workflows
 * Familiarity with integrating security gates into build/test pipelines
 * Background in continuous improvement practices for security, risk mitigation and compliance auditing

## Description

We're looking for a Senior Security Engineer (m/f/d) to join our team in Germany in a hybrid working mode.

In this role, you will be focused on building security solutions that help organizations monitor, assess and improve the security posture of open-source software. You will work on a platform that provides unified visibility into open-source vulnerabilities and delivers security ratings for open-source libraries, enabling risk-based decision-making for development teams.

The role combines expertise in DevSecOps, vulnerability management and automation to design, implement and iterate security solutions integrated into modern development workflows. You will collaborate with engineers across disciplines to deliver scalable, secure and efficient security products.

Responsibilities

 * Contribute to the design and enhancement of solutions for open-source vulnerability monitoring and security ratings
 * Integrate and improve security controls in CI/CD pipelines using GitHub Actions and automation tools
 * Apply DevSecOps principles and secure software development practices across the engineering lifecycle
 * Collaborate with cross-functional teams to ensure stability, scalability and compliance of delivered solutions
 * Share knowledge, drive continuous improvement and uphold secure engineering effectiveness within the team


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next)
- [Yes, You Need to Unit Test your JavaScript. Here's How.](https://www.wearedevelopers.com/videos/439-yes-you-need-to-unit-test-your-javascript-here-s-how)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [Real-World Security for Busy Developers](https://www.wearedevelopers.com/videos/1545-real-world-security-for-busy-developers)

## Related Articles

- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)