**Responsibilities**
- Lead and coordinate security audits across the software development lifecycle: from architecture, process, risk to testing
- Lead the PCI annual certification process by coordinating efforts among EPAM, customers, and QSAs
- Establish secure software development lifecycle (SSDLC) programs
- Support software development teams in secure development methodologies, tools, and processes
- Train software development teams in the areas of secure development
- Build secure architecture and design for projects
- Communicate with customers and teams, and convey the importance of a secure software development lifecycle and ways to establish it
- Cooperate with all sub-teams (BAs, developers, QAs); build consistent understanding of security requirements, main threats, and implemented mitigations
- Communicate and coordinate work with other security teams - Cloud Security Engineers, Infrastructure Security Engineers, or Penetration Testers
**Requirements**:
- Software Development or Security-focused university degree OR equivalent experience
- Motivation to develop and grow in the field of Security
- Familiarity with one or more Security Development methodologies (e.g. Microsoft SDL, OWASP OpenSAMM, BSIMM, etc.)
- Familiarity with security threats and attack scenarios, such as OWASP Top 10
- Familiarity with Threat Modeling, hands-on experience with one or more Threat Modeling Tools
- Familiarity with one or more tools in the following categories: Static Code Analysis, Static / Dynamic Application Security Testing, Penetration Testing, Intrusion Detection/Prevention




- Understanding of main Security-related activities in development such as Security Requirements gathering, Risk Assessment, Security Code Review
- Familiarity with security threats, their implementation, and their classification
- Familiarity with existing PCI DSS and GDPR security standards and regulations, experience with requirements implementation
- Understanding of main security concepts and principles
- Understanding of main areas of protection and levels of defense
- Understanding of mitigation mechanisms for threats
- Understanding of basic principles of infrastructure security and penetration testing
- Experience with cloud security controls and policies on top of AWS
- B2+ English level proficiency
**Nice to have**
- Knowledge of Security Features and Mechanisms provided by at least one OS and development platform/technologies
- Familiarity with DevOps principles: CI/CD, test automation, shift-left security, and shared responsibility models
- Experience with cloud security controls and policies on top of Microsoft Azure
- Relevant certifications such as CISSP, CCSP, SANS GIAC, or similar qualifications
**We offer**
- Career plan and real growth opportunities
- Unlimited access to LinkedIn learning solutions
- International Mobility Plan within 25 countries
- Constant training, mentoring, online corporate courses,



eLearning and more
- English classes with a certified teacher
- Support for employee’s initiatives (Algorithms club, toastmasters, agile club and more)
- Enjoyable working environment (Gaming room, napping area, amenities, events, sport teams and more)
- Versátil work schedule and dress code
- Collaborate in a multicultural environment and share best practices from around the globe
- Hired directly by EPAM & 100% under payroll
- Law benefits (IMSS, INFONAVIT, 25% vacation bonus)
- Major medical expenses insurance: Life, Major medical expenses with dental & visual coverage (for the employee and direct family members)
- 13 % employee savings fund, capped to the law limit
- Grocery coupons
- 30 days December bonus
- Employee Stock Purchase Plan
- 12 vacations days plus 4 floating days
- Official Mexican holidays, plus 5 extra holidays (Maundry Thursday and Friday, November 2nd, December 24th & 31st)
- Monthly non-taxable amount for the electricity and internet bills
EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.

📌 Application Security Architect I (México)
🏢 Epam Systems
📍 México