Lead APT & Automated Validation Engineer

Brak informacji o wynagrodzeniu
SeniorFull-time
#453820·Dodano 5 dni temu·1
Źródło: justjoin.it
Aplikuj teraz

Tech Stack / Keywords

Exploit DevelopmentExploit ChainingPythonpenetration testingContinuous Security ValidationNetwork ProtocolsOWASP TOP 10oauthMulti-Factor Authentication

Firma i stanowisko

EPAM is a global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, they empower clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.

Wymagania

  • 5+ years in offensive security, penetration testing, or security engineering roles
  • At least 1 year of leadership experience
  • Expertise in exploit chaining and attack logic
  • Proficiency in Python for writing custom exploits and automation
  • Experience configuring and scaling continuous automated security validation tools like Pentera, Cymulate, or Picus
  • In-depth knowledge of OSI model and network protocols (DNS, BGP, TCP/IP)
  • Understanding of web application vulnerabilities including OWASP Top 10 and API flaws such as IDOR
  • Proven ability to engineer automated exploit scripts that safely validate vulnerabilities without crashing infrastructure or corrupting production databases
  • English proficiency at B1+ level or above

Nice to have:

  • Skills in Bash and/or Go for custom tooling and exploit development
  • Familiarity with OAuth flows and programmatic authentication handling
  • Experience with bypassing or automating Multi-Factor Authentication challenges

Obowiązki

  • Design and sequence exploit chains combining multiple vulnerabilities to achieve high-impact outcomes
  • Develop custom exploits and scripts to automate multi-stage attack scenarios
  • Build and maintain automated authentication flows handling OAuth, TOTP, and MFA
  • Configure, scale, and operate continuous automated security validation platforms
  • Engineer exploit scripts to safely validate vulnerabilities in live production without service disruption or data corruption
  • Analyze network and web application attack surfaces for automated exploitation opportunities
  • Collaborate with security and engineering teams to convert manual pentesting techniques into automated workflows
  • Continuously improve organization's offensive automation framework and tooling

Benefity

  • Work with top tech minds in AI, cloud, and digital platform modernization
  • Supportive team and agile, startup-like culture
  • Hybrid work mode and remote opportunities within Poland
  • Up to 60 days annual work abroad
  • Business-driven relocation opportunities
  • Career development programs and mentorship
  • Certification support (Anthropic, Gemini, GCP, Azure, AWS)
  • English classes
  • Stable pay and Employee Stock Purchase Plan with 15% discount
  • Benefits package including health insurance, multisport, shopping vouchers
  • Referral bonuses up to $2,000
  • Offices with entertainment and relaxation zones, free snacks and coffee
  • Corporate social and well-being events
  • B2B cooperation agreements are possible with terms agreed individually
Elastyczne godziny
Pakiet relokacyjny
Szkolenia wewnętrzne
Budżet konferencyjny
Dofinansowanie szkoleń
Spotkania integracyjne
Kursy językowe
Karta sportowa
Opieka zdrowotna
Ubezpieczenie
Premie
Darmowe przekąski
Napoje w biurze

Inne informacje

Klikając w przycisk „Aplikuj” lub w inny sposób wysyłając zgłoszenie rekrutacyjne, zgadzasz się na przetwarzanie Twoich danych osobowych przez EPAM Systems (Poland) sp. z o.o. z siedzibą w: Fabryczna 1A, 31-553 Kraków (Pracodawca), jako administratora danych osobowych w celu przeprowadzenia rekrutacji na stanowisko wskazane w ogłoszeniu zgodnie Polityką Prywatności dostępną na stronie: https://www.epam.com/applicant-privacy-notice

EPAM Systems

EPAM Systems

1361 aktywnych ofert

Zobacz wszystkie oferty
Aplikuj teraz