All vacancies

Lead APT & Automated Validation Engineer
EPAM Systems
Remote · PolandSalary not disclosedfull-timeEPAM Systems Careers (remote abroad)
We are seeking a Lead APT & Automated Validation Engineer who goes beyond traditional penetration testing. This role is for a developer at heart — someone who can orchestrate, script, and chain network and web application exploits to run autonomously, driving continuous and scalable security validation across complex environments.
Responsibilities
- Design and sequence exploit chains that combine multiple vulnerabilities to achieve higher-impact outcomes (e.g., pairing information disclosure with SSRF to reach Remote Code Execution)
- Develop custom exploits and weaponized scripts to automate multi-stage attack scenarios
- Build and maintain automated authentication flows handling OAuth, TOTP, and MFA programmatically
- Configure, scale, and operate continuous automated security validation platforms
- Engineer exploit scripts capable of safely validating vulnerabilities in live production environments without disrupting services or corrupting data
- Analyze network and web application attack surfaces to identify opportunities for automated exploitation
- Collaborate with security and engineering teams to translate manual pentesting techniques into repeatable, automated workflows
- Continuously improve the organization's offensive automation framework and tooling
Languages
- Work format
- Remote
- Seniority
- Lead
- Posted
- 8 Oct 2026
- Last verified
- In the last 5 days
Similar roles
- AI Research Engineer (Model Compression & Quantization)Tether Operations Limited · Remote · worldwide, UTC+4 accepted
- Senior Software Engineer (Golang)Chainstack · Remote · worldwide, UTC+4 accepted
- Senior DevOps EngineerFundraise Up · Remote · Armenia
- Web Frontend Engineer - JS, CSS, React, FlutterCanonical · Remote · worldwide
- Senior Machine Learning EngineerTalent Inc. · Remote · worldwide, UTC+4 accepted
- Spreadsheet Systems DeveloperSIL International · Remote · worldwide, UTC+4 accepted
