Lead APT & Automated Validation Engineer

Brak informacji o wynagrodzeniu
SeniorZdalnie·KrakówFull-time
#453830·Dodano 7 dni temu·0
Źródło: justjoin.it
Aplikuj teraz

Tech Stack / Keywords

Exploit DevelopmentExploit Chainingpenetration testingPythonOWASP TOP 10Continuous Security ValidationTCP/IPoauth

Firma i stanowisko

EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.

Wymagania

  • 5+ years in offensive security, penetration testing, or security engineering roles
  • At least 1 year of leadership experience
  • Expertise in exploit chaining and attack sequencing for high-impact compromises
  • Proficiency in Python for custom exploits and attack script automation
  • Experience with continuous automated security validation tools like Pentera, Cymulate, or Picus
  • In-depth knowledge of OSI model and protocols such as DNS, BGP, TCP/IP
  • Understanding of web vulnerabilities including OWASP Top 10 and API flaws like IDOR
  • Proven ability to engineer safe automated exploit scripts for production environments

Nice to have:

  • Skills in Bash and/or Go for custom tooling and exploit development
  • Familiarity with OAuth flows and programmatic authentication handling
  • Experience bypassing or automating Multi-Factor Authentication challenges

Obowiązki

  • Design and sequence exploit chains combining multiple vulnerabilities for impactful outcomes
  • Develop custom exploits and weaponized scripts for multi-stage attack automation
  • Build and maintain automated authentication flows including OAuth, TOTP, and MFA
  • Configure, scale, and operate continuous automated security validation platforms
  • Engineer exploit scripts to safely validate vulnerabilities in production without disruption
  • Analyze network and web application attack surfaces for automated exploitation opportunities
  • Collaborate with security and engineering teams to automate manual pentesting techniques
  • Continuously improve offensive automation frameworks and tooling

Benefity

  • Hybrid work mode with opportunity to work remotely within Poland
  • Chance to work abroad for up to 60 days annually
  • Business-driven relocation opportunities
  • Career development programs including mentoring, soft skills, and well-being
  • Certification opportunities (Anthropic, Gemini, GCP, Azure, AWS)
  • English language classes
  • Stable pay and participation in Employee Stock Purchase Plan with 15% discount
  • Benefits package including health insurance, multisport, shopping vouchers
  • Referral bonuses up to $2,000
  • Offices with entertainment and relaxation zones, table tennis, football
  • Free snacks, coffee, and corporate social and well-being events
  • Open to B2B cooperation with individually agreed terms
Elastyczne godziny
Pakiet relokacyjny
Szkolenia wewnętrzne
Budżet konferencyjny
Dofinansowanie szkoleń
Spotkania integracyjne
Kursy językowe
Opieka zdrowotna
Karta sportowa
Ubezpieczenie
Płatny urlop
Premie
Napoje w biurze
Darmowe przekąski

Inne informacje

Klikając w przycisk „Aplikuj” lub w inny sposób wysyłając zgłoszenie rekrutacyjne, zgadzasz się na przetwarzanie Twoich danych osobowych przez EPAM Systems (Poland) sp. z o.o. z siedzibą w: Fabryczna 1A, 31-553 Kraków (Pracodawca), jako administratora danych osobowych w celu przeprowadzenia rekrutacji na stanowisko wskazane w ogłoszeniu zgodnie Polityką Prywatności dostępną na stronie: https://www.epam.com/applicant-privacy-notice

EPAM Systems

EPAM Systems

1484 aktywne oferty

Zobacz wszystkie oferty
Aplikuj teraz