Product Security Technical Consultant

We are seeking a Product Security Technical Consultant to advise industrial product development teams on security requirements, regulatory compliance and AI-driven secure development practices across large, federated product portfolios. Responsibilities Design and maintain product security requirements frameworks for large federated product portfolios including central control libraries, deviation governance workflows and risk acceptance proceduresTranslate Cyber Resilience Act essential requirements into actionable engineering specifications covering SBOM governance, secure-by-default configurations and vulnerability handling proceduresPerform OT/ICS security level assessments including SL-T vs SL-A gap analysis, zone/conduit modeling and component requirement mappingLead threat modeling workshops with engineering teams using STRIDE, PASTA or MITRE ATT&CK for ICSDefine and implement SDL/SSDLC programs including OWASP ASVS compliance matrices, SAST/DAST/SCA toolchain integration and secure coding standardsSupport Notified Body engagement and technical documentation preparation for CRA Class I and Class II productsDesign and execute threat models for industrial products integrating AI/ML or LLM capabilities and apply OWASP LLM Top 10 mitigationsIntegrate AI security controls into DevSecOps pipelines including model provenance, AI SBOM and MLOps security gatesSupport conformity obligations for high-risk AI systems including technical documentation, human oversight mechanism design and audit trail architectureConduct engineering-level regulatory gap assessments across CRA, NIS2, EU AI Act and DORA frameworks and deliver remediation roadmapsPresent compliance posture and security architecture findings to senior client stakeholders and facilitate cross-functional alignment workshopsContribute to external publications, white papers and industry forums to support practice capability-building Requirements 5+ years of experience in product security advisory for industrial product developmentKnowledge of CRA, IEC 62443 and NIS2 regulatory frameworksExpertise in threat modeling methodologies including STRIDE, PASTA and MITRE ATT&CK for ICSProficiency in secure SDLC practices including OWASP ASVS compliance matrices and SAST/DAST/SCA toolchain integrationFamiliarity with AI/ML security including OWASP LLM Top 10 and AI SBOM governanceUnderstanding of EU AI Act conformity obligations for high-risk AI systemsBackground in DevSecOps pipeline integration including CI/CD compliance checks and MLOps security gatesSkills in stakeholder communication and presenting findings to senior client stakeholders such as CISOs and engineering VPsCapability to conduct engineering-level gap assessments and deliver remediation roadmaps across regulatory frameworks We offer We gather like-minded people:Engineering community of industry professionalsFriendly team and enjoyable working environmentFlexible schedule and opportunity to work remotely within PolandChance to work abroad for up to 60 days annuallyBusiness-driven relocation opportunitiesWe provide growth opportunities:Outstanding career roadmapLeadership development, career advising, soft skills, and well-being programsCertification (GCP, Azure, AWS)Unlimited access to LinkedIn Learning, Get Abstract, Cloud GuruEnglish classesWe cover it all:Stable income (Employment Contract or B2B)Participation in the Employee Stock Purchase PlanBenefits package (health insurance, multisport, shopping vouchers)Strategically located offices featuring entertainment and relaxation zones, table tennis and football, free snacks, fantastic coffee, and moreReferral bonusesCorporate, social and well-being eventsPlease, note:The set of bonuses might vary based on the role you apply for – specifics will be discussed with our recruiter during the general interview.We will reach out to selected candidates exclusively. EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.