We are looking for a Lead Security System Engineer to own vulnerability triage, deep technical analysis, and scalable remediation patterns across apps, cloud, and supply chain. You will work closely with product and development teams to advance secure SDLC and DevSecOps controls while reducing portfolio-wide risk—apply now.

Responsibilities

- Lead technical triage, validate results, and prioritize security vulnerabilities
- Analyze findings from Checkmarx, CodeQL, Wiz, and JFrog Xray
- Drive investigations across application-code, cloud-configuration, IAM, dependency, and software supply-chain vulnerabilities
- Develop proof-of-concept fixes, write remediation guidance, and create reusable fix patterns
- Perform secure-code reviews and deliver actionable recommendations to development teams
- Create remediation playbooks, runbooks, and technical guidance for engineers
- Support root-cause analysis for recurring or complex vulnerabilities
- Review engineering outputs and provide technical guidance to Senior Security Engineers
- Partner with product and development teams to strengthen secure engineering practices and reduce repeat findings
- Support vulnerability reduction planning, prioritized backlogs, risk reporting, and recurring trend analysis
- Guide GitHub repository migration,



GitHub Actions and Azure DevOps pipeline migration, including runners, secrets, permissions, and deployment integrations
- Contribute to Checkmarx onboarding, DevSecOps controls, automated quality gates, and Golden Pipeline modernization

Requirements

- Extensive experience in IT with a focus on application security, cloud security, and software supply-chain security
- Expertise with Checkmarx, CodeQL, SAST/DAST, secure code review, and secure SDLC practices
- Proficiency in AWS, Wiz, IAM, and cloud configuration security
- Hands-on experience with JFrog Xray, dependency analysis, Chainguard, and SBOM concepts
- Solid background in DevSecOps, vulnerability triage, root-cause analysis, and remediation pattern development
- Proven track record in security automation and vulnerability management at scale
- Working knowledge of GitHub repository migration, GitHub Actions, and Azure DevOps pipeline migration
- Deep understanding of artifact and dependency governance, curation policies, and automated policy validation
- Demonstrated ability to lead technical teams and guide senior security engineers
- Experience contributing to large-scale, portfolio-wide security enablement programs

📌 Lead Security System Engineer (Bengaluru)
🏢 EPAM Systems
📍 Bengaluru