[Hiring] Lead AI Security Engineer @EPAM

Role Description

We are seeking a Lead AI Security Engineer to secure enterprise microservices APIs across web and mobile environments. You will partner with engineering and business stakeholders to improve security and observability using AI-driven detection and automation.

• Implement security controls for web applications, APIs, microservices, and AI-enabled services
• Design observability for microservice REST and GraphQL APIs and critical application workflows
• Leverage AI and automation to analyze telemetry, logs, and security events to detect and investigate issues
• Identify and mitigate risks related to exposed endpoints and publicly accessible services
• Coordinate with application teams, product owners, and business stakeholders to validate workflows and resolve issues
• Communicate risks, mitigation plans, and recovery status to technical and business audiences
• Develop operational runbooks and troubleshooting procedures for recurring endpoint and API issues

Qualifications

• 5+ years of experience securing APIs, web applications, and service-to-service communications
• Experience with microservices, REST APIs, GraphQL, and event-driven architectures
• Experience in AI Security and LLM application security testing, including agentic platforms
• Lead-level experience partnering with application teams and business stakeholders to drive remediation
• Strong project ownership skills to triage events and deliver secure solutions end to end
• Strong observability design skills using logs, traces, metrics, and event streams
• Strong automation and scripting skills to analyze telemetry, logs, and security events
• Strong risk assessment skills for exposed endpoints and publicly accessible services
• Strong communication skills to present findings and mitigation plans to technical and business audiences
• English proficiency at B2 (Upper-Intermediate)

Requirements

• Akamai Application Security experience, including API Security or Bot Manager (Nice to have)
• Dynatrace experience for logs, traces, metrics, and event streams (Nice to have)
• Grafana experience for dashboards and alerting (Nice to have)
• Langfuse experience for observability and telemetry analysis (Nice to have)
• Splunk experience for log analytics and security event investigations (Nice to have)