Senior Application Security Engineer

We are looking for a Senior Application Security Engineer to safeguard the confidentiality, integrity, and availability of our client's information systems. In this role, you will utilize a variety of security tools and technologies to secure applications and gaming systems. If you possess a proactive security mindset and are eager to stay a step ahead of potential threats, join our passionate team to advance your career in security!
We accept CVs in English only.

#LI-DNI

Responsibilities

• Define and continually update the application security methodology, performing security assessments on both internal and external applications
• Inform and guide web development teams on secure coding practices and assist with both static and dynamic code analysis
• Play a key role in the design, creation, testing, documentation, deployment, and maintenance of new automation capabilities and security services for the InfoSec team
• Stay updated on application security threats and develop InfoSec training focused on web-based exploits/tools and corresponding mitigation techniques

• Bachelor's or Master's degree in Computer Science or a related technical field, or equivalent professional experience
• At least 3 years of experience with Information Security principles, technology, and control processes
• Proficient in design review and threat modeling, ensuring thorough security considerations in application development
• Experience providing integrated security services throughout the software development life cycle (SDLC)
• Knowledgeable in Secure Coding and familiar with AppSec frameworks such as OWASP Guide, SANS CWE Top 25, and CERT Secure Coding
• Excellent communication skills, capable of report writing and creating detailed technical documentation
• Certification in CEH, OSCP, GPEN, or GWAPT preferred
• Fluent in English at a B2 level or higher

• Experience in building systems using programming languages such as Python, C++, Golang, or Rust
• Experience setting up and managing services on AWS infrastructure
• Strong understanding of computer science fundamentals such as algorithms, data structures, object-oriented design, databases
• Proven ability to collaborate within a team to build complex security solutions
• Familiarity with continuous integration/continuous delivery (CI/CD) systems
• Knowledge of Docker and Terraform for containerization and infrastructure as code deployments

• Learning Culture - We want you to be the best version of yourself, that is why we offer unlimited access to learning platforms, a wide range of internal courses, and all the knowledge you need to grow professionally
• Health Coverage - Health and wellness are important, that is why we have you and up to four family members in a premiere health plan. We have a couple of options, so you can choose what is best for you and your family
• Visual Benefit - Seeing your work for us would be a sight for sore eyes. We want your vision to always be at 100% which is why we offer up to $200.000 COP for any visual health expenses
• Life Insurance Plan - We have partnered with MetLife to offer a full-coverage Ife insurance plan. So, your family is covered, even if you are gone
• Medical Leave Coverage - We are one of the few companies that cover 100% of your medical leave, for up to 90 days. Your health is the most important thing to us
• Professional Growth Opportunities - We have designed a highly competitive and complete development process, where you will have all the tools to get where you have always wanted to be, personally and professionally
• Stock Option Purchase Plan - As an EPAMer you can be more than just an employee, you will also have the opportunity to purchase stock at a reduced price and become a part owner of our organization
• Additional Income - Besides your regular salary, you will also have the chance to earn extra income by referring talent, being a technical interviewer, and many more ways
• Community Benefit - You will be part of a worldwide community of over 50,000 employees, where you can learn, challenge yourself, stand out, and share your knowledge and experience with multicultural teams!