Lead APT & Automated Validation Engineer

EPAM Systems is a global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. The company has over thirty years of expertise in custom software, product and platform engineering to empower clients to become AI-Native enterprises.

• 5+ years in offensive security, penetration testing, or security engineering roles
• At least 1 year of relevant leadership experience
• Expertise in exploit chaining and attack logic for high-impact compromises
• Proficiency in Python for custom exploits and complex attack automation
• Experience configuring and scaling security validation tools like Pentera, Cymulate, or Picus
• In-depth knowledge of OSI model and core network protocols (DNS, BGP, TCP/IP)
• Understanding of web vulnerabilities including the OWASP Top 10 and API flaws (IDOR)
• Ability to engineer exploit scripts that safely validate vulnerabilities without infrastructure damage
• English proficiency at B1+ (minimum)

• Design and sequence exploit chains combining multiple vulnerabilities for higher-impact outcomes
• Develop custom exploits and weaponized scripts to automate multi-stage attack scenarios
• Build and maintain automated authentication flows handling OAuth, TOTP, and MFA programmatically
• Configure, scale, and operate continuous automated security validation platforms
• Engineer exploit scripts to safely validate vulnerabilities in live production without disruption
• Analyze network and web application attack surfaces for automated exploitation opportunities
• Collaborate with security and engineering teams to translate manual pentesting into automated workflows
• Continuously improve the offensive automation framework and tooling

Benefits listed are available to employees only. Open to working with Contractors with individually agreed B2B terms. Only selected candidates will be contacted.