Lead APT & Automated Validation Engineer

EPAM Systems is a global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, they enable clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.

• 5+ years of experience in offensive security, penetration testing, or security engineering
• At least 1 year of leadership experience
• Expertise in exploit chaining and attack logic including sequencing low-severity findings into high-impact compromises
• Proficiency in Python for custom exploit development and automation
• Experience with continuous automated security validation tools like Pentera, Cymulate, or Picus
• In-depth knowledge of OSI model and core network protocols (DNS, BGP, TCP/IP)
• Understanding of web vulnerabilities including OWASP Top 10 and API flaws such as IDOR
• Proven ability to engineer automated exploit scripts that safely validate vulnerabilities without disrupting network infrastructure or corrupting production databases
• English proficiency at B1+ or higher

• Design and sequence exploit chains combining multiple vulnerabilities for high-impact outcomes
• Develop custom exploits and weaponized scripts for multi-stage attack automation
• Build and maintain automated authentication flows handling OAuth, TOTP, and MFA
• Configure, scale, and operate continuous automated security validation platforms
• Engineer exploit scripts that safely validate vulnerabilities in live production without service disruption
• Analyze network and web application attack surfaces for automated exploitation opportunities
• Collaborate with security and engineering teams to convert manual pentesting into automated workflows
• Continuously improve offensive automation framework and tooling

Benefits listed are available to employees only. EPAM is open to working with Contractors; terms of B2B cooperation are agreed individually. Selected candidates will be contacted exclusively.