EPAM Systems

Lead APT & Automated Validation Engineer

Brak informacji o wynagrodzeniu

SeniorZdalnie·ŁódźFull-time

#453843·Dodano 17 dni temu·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

PythonExploit DevelopmentExploit ChainingSecurity AutomationWeb Application SecurityoauthMulti-Factor Authentication

Podsumowanie oferty

The Lead APT & Automated Validation Engineer role involves developing and orchestrating automated exploit chains for continuous security validation across complex environments. The candidate will design, script, and automate multi-stage attack scenarios with a focus on network and web application security. This senior role leads efforts to scale and operate continuous security validation platforms and collaborates with security and engineering teams to transform manual penetration testing into automated workflows.

Wymagania

5+ years in offensive security, penetration testing, or security engineering roles
At least 1 year of leadership experience
Expertise in exploit chaining and sequencing low-severity findings into high-impact compromises
Proficiency in Python for custom exploits and automation
Experience with continuous automated security validation tools such as Pentera, Cymulate, or Picus
In-depth knowledge of the OSI model and core network protocols (DNS, BGP, TCP/IP)
Understanding of web application vulnerabilities including OWASP Top 10 and API flaws like IDOR
Ability to engineer safe automated exploit scripts avoiding service disruption or data corruption
English proficiency at B1+ level or above

Nice to have:

Skills in Bash and/or Go for custom tooling and exploit development
Familiarity with OAuth flows and programmatic authentication handling
Experience bypassing or automating Multi-Factor Authentication challenges

Obowiązki

Design and sequence exploit chains combining multiple vulnerabilities for high-impact outcomes
Develop custom exploits and weaponized scripts to automate multi-stage attack scenarios
Build and maintain automated authentication flows handling OAuth, TOTP, and MFA programmatically
Configure, scale, and operate continuous automated security validation platforms
Engineer exploit scripts to safely validate vulnerabilities in live production without disruption
Analyze network and web application attack surfaces for automated exploitation opportunities
Collaborate with security and engineering teams to automate manual pentesting workflows
Continuously improve the offensive automation framework and tooling

Benefity

Opportunity to work with leading experts in AI, cloud, and digital platform modernization
Supportive, agile, startup-like culture
Hybrid work mode with remote option within Poland
Up to 60 days annual work abroad
Business-driven relocation opportunities
Career development, mentoring, and certification programs (Anthropic, Gemini, GCP, Azure, AWS)
English classes
Stable pay and Employee Stock Purchase Plan with 15% discount
Benefits package including health insurance, multisport, shopping vouchers
Referral bonuses up to $2,000
Offices with entertainment zones, table tennis, football, free snacks and coffee
Corporate, social, and well-being events

Elastyczne godziny

Pakiet relokacyjny

Szkolenia wewnętrzne

Budżet konferencyjny

Dofinansowanie szkoleń

Spotkania integracyjne

Kursy językowe

Karta sportowa

Opieka zdrowotna

Ubezpieczenie

Darmowe przekąski

Napoje w biurze

Premie

Inne informacje

Benefits listed are for employees only. Terms of B2B cooperation agreements are negotiated individually. Only selected candidates will be contacted.

EPAM Systems

1552 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz