Senior Web App Security Engineer - Remote Worldwide — Columbus
Traveler-Friendly Insight
Global Remote Opportunity — EPAM Systems lists this role as open "Anywhere in the World," making it one of the more genuinely location-flexible postings from a major IT services company. However, the nature of security incident response (real-time threat handling, coordination with a security team) suggests this role likely carries timezone alignment expectations. Confirm with the team whether overlapping hours with Europe (CET/EET) are required, given EPAM's headquarters in Armenia, Belarus, and Georgia.
Visa Considerations: Since no specific country is mandated, digital nomads can explore popular visa options:
- Portugal (D8 Digital Nomad Visa) — Great fit if the client team is EU-based; Lisbon costs ~$2,000–2,500/month.
- Thailand (LTR Visa or METV) — Bangkok offers excellent connectivity and coworking infrastructure at ~$1,200–1,800/month.
- Georgia (1-year remote work friendly) — Directly relevant given EPAM's HQ there; Tbilisi runs ~$800–1,200/month.
No salary data was provided, so cost-of-living comparisons are relative. EPAM senior engineers typically earn in the $60K–$100K+ range depending on region. That range goes very far in Tbilisi or Bangkok, but is tighter in Lisbon.
Note: No explicit perks like coworking allowances or equipment stipends were mentioned — worth asking about during the interview process.
Headquarters: Armenia, Belarus, Georgia
URL: http://epam.com
We are looking for an experienced Senior Web Application Security Engineer to join and support the client's security team. The specialist will work closely with the broader security team, covering key areas of web application protection and security operations.
Responsibilities
- Configure, tune and maintain Web Application Firewall (WAF) rules and policies using Akamai
- Participate in security incident handling, investigation and resolution related to web application threats
- Conduct reviews of WAF configurations, security policies and web application security posture
- Identify and analyze attack patterns, anomalies and vulnerabilities targeting web applications
- Provide day-to-day support to the security team, sharing expertise and best practices in web app security
- Support integration of security processes across the broader team environment
Requirements
- 5+ years of hands-on experience with Akamai (WAF, Kona Site Defender or similar Akamai security products)
- Knowledge of web application security concepts such as OWASP Top 10, DDoS mitigation and bot management
- Experience with WAF rule tuning, false positive management and security incident response
- Capability to work independently and integrate quickly into an existing team
- Proficiency in English communication skills
Nice to Have
- Experience with other WAF/CDN platforms such as Cloudflare, F5 and Imperva
- Familiarity with API security
- Security certifications (CISSP, CEH, GWAPT, etc.)
To apply: https://weworkremotely.com/remote-jobs/epam-systems-senior-web-application-security-engineer
Frequently Asked Questions
Is this role truly remote for candidates anywhere in the world?
What level of Akamai experience is required?
Is there a salary range listed for this position?
Are security certifications required for this role?
What other WAF platforms could be useful for this role?
