Lead APT & Automated Validation Engineer

Brak informacji o wynagrodzeniu

SeniorZdalnie·PoznańFull-time

#477433·Dodano 5 dni temu·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

penetration testingExploit ChainingPythonAutomated Security ValidationOWASP TOP 10Vulnerability ManagementoauthNetwork Protocols

Podsumowanie oferty

Develop and automate exploit chains for continuous security validation across complex network and web application environments. The role combines offensive security engineering with automated attack workflows, using Python and authentication technologies such as OAuth, TOTP and MFA.

Wymagania

5+ years of experience in offensive security, penetration testing or security engineering roles.
At least 1 year of relevant leadership experience.
Expertise in exploit chaining and attack logic, including sequencing low-severity findings into high-impact compromises.
Proficiency in Python for writing custom exploits and automating complex multi-stage attack scripts.
Experience configuring and scaling continuous automated security validation tools such as Pentera, Cymulate or Picus, including custom Pentest Robots architectures.
In-depth knowledge of the OSI model and core network protocols (DNS, BGP, TCP/IP).
Understanding of web application vulnerabilities, including the OWASP Top 10 and API flaws such as IDOR.
Proven capability to engineer automated exploit scripts that safely validate vulnerabilities without crashing network infrastructure or corrupting production databases.
English proficiency at B1+ level or above.

Nice to have:

Skills in Bash and/or Go for custom tooling and exploit development.
Familiarity with OAuth flows and programmatic handling of authentication.
Background in bypassing or automating Multi-Factor Authentication challenges.

Obowiązki

Design and sequence exploit chains that combine multiple vulnerabilities, such as information disclosure with SSRF to reach Remote Code Execution.
Develop custom exploits and weaponized scripts to automate multi-stage attack scenarios.
Build and maintain automated authentication flows handling OAuth, TOTP and MFA programmatically.
Configure, scale and operate continuous automated security validation platforms.
Engineer exploit scripts to safely validate vulnerabilities in live production environments without disrupting services or corrupting data.
Analyze network and web application attack surfaces to identify opportunities for automated exploitation.
Collaborate with security and engineering teams to turn manual penetration-testing techniques into repeatable, automated workflows.
Improve the organization's offensive automation framework and tooling.

Benefity

Career development programs and thought leadership, mentoring, soft skills and well-being programs.
Certification opportunities in Anthropic, Gemini, GCP, Azure and AWS.
English classes.
Employee Stock Purchase Plan with a 15% discount.
Benefits package including health insurance, multisport and shopping vouchers.
Referral bonuses up to $2,000.
Offices with entertainment and relaxation zones, table tennis, football, free snacks and coffee.
Corporate, social and well-being events.
Business-driven relocation opportunities.

Kursy językowe

Udziały pracownicze

Ubezpieczenie

Karta sportowa

Premie

Darmowe przekąski

Spotkania integracyjne

Inne informacje

Remote work is available within Poland; the work mode is described as hybrid by design.
Opportunity to work abroad for up to 60 days annually.
Benefits listed in the offer are available to employees only; the company is also open to B2B contractors, with terms agreed individually.

EPAM Systems

1770 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz