Senior Security Software Engineer (Cryptography & Threat Modeling)

About the role

EPAM is looking for a Senior Security Software Engineer with deep expertise in cryptography and threat modeling. You will lead cryptographic inventory initiatives, ensure FIPS 140-3 compliance, and work closely with product and security teams to embed security throughout the development lifecycle.

Key responsibilities

• Drive creation of a crypto inventory using IBM QSE and agentic validation.
• Review findings and issues related to FIPS 140-3 compliance.
• Define, coordinate and track mitigation plans with engineering teams.
• Facilitate threat‑modeling workshops for cloud applications and produce actionable reports.
• Contribute to Secure Development and Operations Lifecycle (SDOL) activities.
• Deliver comprehensive crypto inventory and compliance documentation.
• Track progress on cryptographic mitigation plans and support knowledge transfer to the Security Team.

Required profile

• 3+ years of hands‑on software security experience.
• Proven expertise in FIPS 140-3 compliance and cryptographic inventory management.
• Ability to work independently and own security initiatives.
• Strong documentation, communication and stakeholder‑management skills.
• Experience facilitating threat‑modeling workshops and producing security reports.
• Upper‑Intermediate English proficiency (B2+).

Required skills

• IBM QSE
• FIPS 140-3
• Cryptography
• Threat modeling
• Jira

What we offer

• Fully remote work from anywhere in Georgia.
• Access to modern offices in Tbilisi, Batumi and coworking spaces in Kutaisi.
• Opportunity to work abroad up to two months per year.
• Leadership development, certifications (GCP, Azure, AWS) and unlimited internal learning resources.
• Employee Stock Purchase Plan, referral bonuses and comprehensive medical & family care.
• Free English classes, trust days, sports activities and corporate events.