EPAM Systems

Lead APT & Automated Validation Engineer

Brak informacji o wynagrodzeniu

SeniorZdalnie·PoznańFull-time

#453854·Dodano 17 dni temu·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

Exploit DevelopmentExploit ChainingPythonAutomated Security Validation PlatformsOWASP TOP 10TCP/IPoauthMulti-Factor Authentication

Podsumowanie oferty

The Lead APT & Automated Validation Engineer role focuses on developing and automating complex exploit chains to enable continuous security validation in complex network and web application environments. The engineer will design automated attack sequences, build exploit scripts, and scale security validation platforms while collaborating with security and engineering teams. This senior role requires leadership experience and expertise in offensive security development.

Wymagania

5+ years of experience in offensive security, penetration testing, or security engineering
At least 1 year of leadership experience
Expertise in exploit chaining and attack logic, sequencing low-severity findings into high-impact compromises
Proficiency in Python for writing custom exploits and automating multi-stage attack scripts
Experience configuring and scaling continuous automated security validation tools such as Pentera, Cymulate, or Picus, including custom Pentest Robots architectures
In-depth knowledge of OSI model and core network protocols including DNS, BGP, TCP/IP
Understanding of web application vulnerabilities including the OWASP Top 10 and API flaws like IDOR
Proven ability to engineer automated exploit scripts that safely validate vulnerabilities without crashing networks or corrupting databases
English proficiency at B1+ (at least B2 level required)

Obowiązki

Design and sequence exploit chains combining multiple vulnerabilities, e.g., pairing information disclosure with SSRF to reach Remote Code Execution
Develop custom exploits and weaponized scripts for multi-stage automated attack scenarios
Build and maintain automated authentication flows handling OAuth, TOTP, and multi-factor authentication programmatically
Configure, scale, and operate continuous automated security validation platforms
Engineer exploit scripts for safe vulnerability validation in production without disrupting services or corrupting data
Analyze network and web application attack surfaces to identify automated exploitation opportunities
Collaborate with security and engineering teams to translate manual pentesting techniques into repeatable automated workflows
Continuously improve offensive automation framework and tooling

Benefity

Opportunity to work remotely within Poland and hybrid mode by design
Chance to work abroad for up to 60 days annually
Business-driven relocation opportunities
Career development programs including mentoring, thought leadership, and soft skills training
Certification support for Anthropic, Gemini, GCP, Azure, AWS
English classes
Stable pay
Participation in Employee Stock Purchase Plan with 15% discount
Benefits package including health insurance, multisport, shopping vouchers
Referral bonuses up to $2,000
Offices with entertainment zones, table tennis, football, free snacks, coffee
Corporate, social and well-being events

Elastyczne godziny

Pakiet relokacyjny

Budżet konferencyjny

Dofinansowanie szkoleń

Kursy językowe

Karta sportowa

Opieka zdrowotna

Premie

Udziały pracownicze

Napoje w biurze

Darmowe przekąski

Inne informacje

Benefits listed are available only to employees. The company is open to working with contractors under individually agreed B2B terms. Only selected candidates will be contacted. By applying, candidates consent to personal data processing by EPAM Systems (Poland) sp. z o.o. in accordance with their Privacy Policy. The position is located in Poland; remote work is allowed only within Poland.

EPAM Systems

1552 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz