Senior Security Software Engineer

We are seeking a Senior Security Software Engineer specializing in Cryptography and Threat Modeling to drive cryptographic inventory initiatives and support FIPS 140-3 compliance across products. This role involves close collaboration with Security and product engineering teams to facilitate threat modeling workshops and deliver comprehensive security documentation. Responsibilities Drive the creation of a crypto inventory using IBM QSE and agentic validationReview findings and issues related to FIPS 140-3 complianceDefine, coordinate and track mitigation plans with engineering teamsFacilitate threat modeling workshops for cloud applicationsProduce clear and actionable threat modeling reportsContribute to broader Secure Development and Operations Lifecycle (SDOL) activitiesDeliver a complete crypto inventory including FIPS 140-3 compliance reportsTrack progress on cryptographic mitigation plans in collaboration with engineering teamsPrepare handover documentation and support knowledge transfer to the Security Team Requirements 3+ years of hands-on experience in software security with end-to-end implementation of security initiativesExpertise in FIPS 140-3 compliance and cryptographic inventory managementCapability to work independently and take ownership of security initiatives with minimal supervisionSkills in driving topics to completion within complex security projectsProficiency in documentation, communication and stakeholder managementBackground in facilitating threat modeling workshops and producing security reportsUpper-Intermediate English language proficiency (B2+) Nice to have Familiarity with IBM QSEBackground in cryptographyCapability to apply agentic AI in hands-on projectsProficiency in using Jira for task and project trackingUnderstanding of security requirements in highly regulated environments such as FedRAMP We offer We connect like-minded people:Delivering innovative solutions to industry leaders, making a global impactEnjoyable working environment, whether it is the vibrant office or the comfort of your own homeOpportunity to work abroad for up to two months per yearRelocation opportunities within our offices in 55+ countriesCorporate and social eventsWe invest in your growth:Leadership development, career advising, soft skills and well-being programsCertifications, including GCP, Azure and AWSUnlimited access to EPAM's internal learning databaseFree English classes with certified teachersWe cover it all:Monetary bonuses for engaging in the referral programMedical & family care packageSix trust days per year (sick leave without a medical certificate)Coverage of psychology sessions of your choiceDiscounts for fitness clubs and sports programsBenefits package (sports activities, a variety of stores and services) EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments. Experience the freedom of remote work from anywhere in Kyrgyzstan, whether it's the comfort of your home or our modern office in Bishkek.