Lead APT & Automated Validation Engineer

EPAM is a global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, the company empowers clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.

• 5+ years in offensive security, penetration testing, or security engineering roles
• At least 1 year of leadership experience
• Expertise in exploit chaining and sequencing low-severity findings into high-impact compromises
• Proficiency in Python for custom exploits and automation
• Experience with continuous automated security validation tools such as Pentera, Cymulate, or Picus
• In-depth knowledge of the OSI model and core network protocols (DNS, BGP, TCP/IP)
• Understanding of web application vulnerabilities including OWASP Top 10 and API flaws like IDOR
• Ability to engineer safe automated exploit scripts avoiding service disruption or data corruption
• English proficiency at B1+ level or above

Nice to have:

• Skills in Bash and/or Go for custom tooling and exploit development
• Familiarity with OAuth flows and programmatic authentication handling
• Experience bypassing or automating Multi-Factor Authentication challenges

• Design and sequence exploit chains combining multiple vulnerabilities for high-impact outcomes
• Develop custom exploits and weaponized scripts to automate multi-stage attack scenarios
• Build and maintain automated authentication flows handling OAuth, TOTP, and MFA programmatically
• Configure, scale, and operate continuous automated security validation platforms
• Engineer exploit scripts to safely validate vulnerabilities in live production without disruption
• Analyze network and web application attack surfaces for automated exploitation opportunities
• Collaborate with security and engineering teams to automate manual pentesting workflows
• Continuously improve the offensive automation framework and tooling

Benefits listed are for employees only. Terms of B2B cooperation agreements are negotiated individually. Only selected candidates will be contacted.