Lead APT & Automated Validation Engineer
New
E
EPAMCybersecurity
Opportunity to work remotely within PolandFull-TimeLead
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Languages
- English proficiency at B1+ level or above
- Experience
- 5+ years of experience in offensive security, penetration testing, or security engineering roles; at least 1 year of relevant leadership experience
- Required Skills
- PythonOAuth
Requirements
- Have 5+ years of experience in offensive security, penetration testing, or security engineering roles.
- Have at least 1 year of relevant leadership experience.
- Demonstrate expertise in exploit chaining and attack logic, including sequencing low-severity findings into high-impact compromises.
- Be proficient in Python for custom exploits and complex multi-stage attack scripts.
- Have experience configuring and scaling continuous automated security validation tools such as Pentera, Cymulate, or Picus, including custom Pentest Robots architectures.
- Have in-depth knowledge of the OSI model and core network protocols, including DNS, BGP, and TCP/IP.
- Understand web application vulnerabilities, including the OWASP Top 10 and API flaws such as IDOR.
- Be able to engineer automated exploit scripts that safely validate vulnerabilities without crashing network infrastructure or corrupting production databases.
- Have English proficiency at B1+ level or above.
- Bash and/or Go skills for custom tooling and exploit development are a plus.
- Familiarity with OAuth flows and programmatic authentication handling is a plus.
- Experience bypassing or automating Multi-Factor Authentication challenges is a plus.
Responsibilities
- Design and sequence exploit chains that combine multiple vulnerabilities to achieve higher-impact outcomes.
- Develop custom exploits and weaponized scripts to automate multi-stage attack scenarios.
- Build and maintain automated authentication flows handling OAuth, TOTP, and MFA programmatically.
- Configure, scale, and operate continuous automated security validation platforms.
- Engineer exploit scripts that safely validate vulnerabilities in live production environments without disrupting services or corrupting data.
- Analyze network and web application attack surfaces to identify opportunities for automated exploitation.
- Collaborate with security and engineering teams to translate manual pentesting techniques into repeatable, automated workflows.
- Continuously improve the organization's offensive automation framework and tooling.
View Full Description & ApplyYou'll be redirected to the employer's site
