Lead AI Security Engineer

We are seeking a Lead AI Security Engineer to secure enterprise microservices APIs across web and mobile environments. You will partner with engineering and business stakeholders to improve security and observability using AI-driven detection and automation.
Responsibilities
Implement security controls for web applications, APIs, microservices, and AI-enabled services
Design observability for microservice REST and GraphQL APIs and critical application workflows
Leverage AI and automation to analyze telemetry, logs, and security events to detect and investigate issues
Identify and mitigate risks related to exposed endpoints and publicly accessible services
Coordinate with application teams, product owners, and business stakeholders to validate workflows and resolve issues
Communicate risks, mitigation plans, and recovery status to technical and business audiences
Develop operational runbooks and troubleshooting procedures for recurring endpoint and API issues
Requirements
5+ years of experience securing APIs, web applications, and service-to-service communications
Experience with microservices, REST APIs, GraphQL, and event-driven architectures
Experience in AI Security and LLM application security testing, including agentic platforms
Lead-level experience partnering with application teams and business stakeholders to drive remediation
Strong project ownership skills to triage events and deliver secure solutions end to end
Strong observability design skills using logs, traces, metrics, and event streams
Strong automation and scripting skills to analyze telemetry, logs, and security events
Strong risk assessment skills for exposed endpoints and publicly accessible services
Strong communication skills to present findings and mitigation plans to technical and business audiences
English proficiency at B2 (Upper-Intermediate)
Nice to have
Akamai Application Security experience, including API Security or Bot Manager
Dynatrace experience for logs, traces, metrics, and event streams
Grafana experience for dashboards and alerting
Langfuse experience for observability and telemetry analysis
Splunk experience for log analytics and security event investigations
We offer
International projects with top brands
Work with global teams of highly skilled, diverse peers
Healthcare benefits
Employee financial programs
Paid time off and sick leave
Upskilling, reskilling and certification courses
Unlimited access to the LinkedIn Learning library and 22,000+ courses
Global career opportunities
Volunteer and community involvement opportunities
EPAM Employee Groups
Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn
EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.

Work arrangement
Yes