Lead Application Security Engineer

We are on the hunt for a Lead Application Security Engineer tasked with protecting the confidentiality, integrity, and availability of our client's information systems. In this pivotal role, you will deploy a diverse array of security tools and technologies to fortify applications and gaming systems. If you are proactive about security and continuously seek to outsmart potential threats, we invite you to join our dedicated team and propel your security career forward!
We accept CVs in English only.

#LI-DNI

Responsibilities

• Continuously refine and enhance the application security framework, conducting security assessments for a range of internal and external applications
• Educate and lead web development teams in adopting secure coding practices, facilitating both static and dynamic code analysis
• Crucially contribute to the ideation, development, testing, documentation, implementation, and upkeep of innovative automation solutions and security services within the InfoSec team
• Keep abreast of the latest application security threats and devise targeted InfoSec training that addresses web-based exploits/tools and their mitigation strategies

• Bachelor's or Master's degree in Computer Science or a related technical field, or an equivalent amount of professional experience
• A minimum of 3 years of experience with Information Security principles, technologies, and control processes
• At least one year of proven leadership and team management experience
• Skilled in design review and threat modeling, with a focus on integrating security into application development
• Experienced in delivering security services throughout the software development lifecycle (SDLC)
• Well-versed in Secure Coding practices and acquainted with AppSec frameworks like OWASP Guide, SANS CWE Top 25, and CERT Secure Coding
• Exceptional communication abilities, adept at report writing and producing detailed technical documentation
• Holding certifications such as CEH, OSCP, GPEN, or GWAPT is preferred
• Fluent in English at a B2 level or higher

• Proficiency in programming with languages such as Python, C++, Golang, or Rust
• Experience in configuring and managing AWS infrastructure services
• Deep understanding of core computer science concepts including algorithms, data structures, object-oriented design, and databases
• Demonstrated capability to work collaboratively within a team to develop sophisticated security solutions
• Familiarity with CI/CD systems
• Experience with Docker and Terraform for effective containerization and infrastructure coding

• Learning Culture - We want you to be the best version of yourself, that is why we offer unlimited access to learning platforms, a wide range of internal courses, and all the knowledge you need to grow professionally
• Health Coverage - Health and wellness are important, that is why we have you and up to four family members in a premiere health plan. We have a couple of options, so you can choose what is best for you and your family
• Visual Benefit - Seeing your work for us would be a sight for sore eyes. We want your vision to always be at 100% which is why we offer up to $200.000 COP for any visual health expenses
• Life Insurance Plan - We have partnered with MetLife to offer a full-coverage Ife insurance plan. So, your family is covered, even if you are gone
• Medical Leave Coverage - We are one of the few companies that cover 100% of your medical leave, for up to 90 days. Your health is the most important thing to us
• Professional Growth Opportunities - We have designed a highly competitive and complete development process, where you will have all the tools to get where you have always wanted to be, personally and professionally
• Stock Option Purchase Plan - As an EPAMer you can be more than just an employee, you will also have the opportunity to purchase stock at a reduced price and become a part owner of our organization
• Additional Income - Besides your regular salary, you will also have the chance to earn extra income by referring talent, being a technical interviewer, and many more ways
• Community Benefit - You will be part of a worldwide community of over 50,000 employees, where you can learn, challenge yourself, stand out, and share your knowledge and experience with multicultural teams!