[Hiring] Technical Product Manager @EPAM

Role Description

We are seeking a Technical Product Manager to lead coordinated delivery of security vulnerability remediation across a web application ecosystem. You will align engineering and business stakeholders, translate security findings into actionable backlog items, and drive release-ready outcomes.

• Own and prioritize the security vulnerability remediation backlog
• Coordinate remediation work across engineering, QA, security, and business stakeholders
• Translate security findings into clear requirements, backlog items, and acceptance criteria
• Drive vulnerabilities through analysis, remediation, testing, validation, release, and closure
• Prioritize remediation based on severity, business risk, deadlines, and technical dependencies
• Track progress, risks, blockers, dependencies, and remediation commitments
• Coordinate validation of findings from SAST, SCA, and DAST tools

Qualifications

• 2+ years of experience as a Technical Product Manager, Product Manager, Product Owner, or Senior Business Analyst with software teams
• Experience in backlog management, prioritization, and delivery planning
• Proven leadership skills to coordinate cross-functional teams and drive commitments to completion
• Strong project management skills for tracking risks, dependencies, and remediation timelines
• Solid understanding of web application security and OWASP vulnerability remediation processes
• Hands-on experience with Jira and Confluence in an Agile/Scrum environment
• Strong analytical skills to translate security findings into requirements and acceptance criteria
• Excellent communication skills for clear status reporting and stakeholder alignment
• High ownership and accountability to proactively escalate critical risks or delays
• Upper-Intermediate English (B2) proficiency, both written and spoken

Requirements

• Nice to have Agile planning and ceremony facilitation experience
• Familiarity with Veracode or similar SAST, SCA, and DAST tooling
• Knowledge of common security vulnerabilities and secure delivery practices