Logo for EPAM Systems

Senior Security Engineer

Role overview

Summary

This role focuses on advanced security engineering and penetration testing, requiring a blend of development skills and expertise in exploit chaining. You will work on identifying and resolving vulnerabilities while guiding security validation strategies at the company.

Qualifications

  • 3+ years of experience in security engineering, penetration testing, or a related field.
  • Strong expertise in exploit chaining and logic, with a demonstrated ability to sequence vulnerabilities for advanced exploitation.
  • Proficient in Python for writing custom exploits and automation scripts.
  • Solid knowledge of cyber threat intelligence, threat modeling, and vulnerability management practices.
  • Familiar with OWASP Top 10 vulnerabilities and API security issues like IDOR.

Responsibilities

  • Chain vulnerabilities together to produce advanced exploitation outcomes.
  • Develop custom exploits and automate complex, multi-stage authentication scripts.
  • Set up and scale continuous, automated security validation tools and frameworks.
  • Perform threat modeling to anticipate and mitigate possible attack vectors.

Key facts

Hard skills

Other skills

  • Problem Solving

About the company

EPAM Systems logo

EPAM Systems

  • IT Services & Consulting
  • XLarge
  • 10,001+
Since 1993, EPAM Systems, Inc. (NYSE: EPAM) has used its software engineering expertise to become a leading global provider of digital engineering, cloud and AI-enabled transformation services, and a leading business and experience consulting partner for global enterprises and ambitious startups. We address our clients’ transformation challenges by fusing EPAM Continuum’s integrated strategy, experience and technology consulting with our 30+ years of engineering execution to speed our clients’ time to market and drive greater value from their innovations and digital investments. We make GenAI real with our AI LLM orchestration, testing and engineering solutions, EPAM DIAL, EPAM EliteA™ and EPAM AI/RUN™, respectively. We deliver globally, but engage locally with our expert teams of consultants, architects, designers and engineers, making the future real for our clients, our partners and our people around the world. We believe the right solutions are the ones that improve people’s lives and fuel competitive advantage for our clients across diverse industries. Our thinking comes to life in the experiences, products and platforms we design and bring to market. Added to the S&P 500 and the Forbes Global 2000 in 2021 and recognized by Glassdoor and Newsweek as a Top 100 Best Workplace, our multidisciplinary teams serve customers across six continents. We are proud to be among the top 15 companies in Information Technology Services in the Fortune 1000 and to be recognized as a leader in the IDC MarketScapes for Worldwide Experience Build Services, Worldwide Experience Design Services and Worldwide Software Engineering Services. Learn more at www.epam.com.

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

We are seeking a Senior Security Engineer who blends a developer's mindset with pentesting expertise, able to orchestrate, script, and chain network and web application exploits to operate autonomously. Responsibilities Chain vulnerabilities together to produce advanced exploitation outcomes, such as combining low-severity information disclosure with SSRF to achieve Remote Code Execution Develop custom exploits and automate complex, multi-stage authentication scripts Set up and scale continuous, automated security validation tools and frameworks Use deep understanding of the OSI model and core network protocols to identify and resolve infrastructure vulnerabilities Evaluate and fix web application vulnerabilities, including OWASP Top 10 issues and API flaws such as IDOR Build automated exploit scripts that safely confirm vulnerabilities without disrupting live network infrastructure or damaging production databases Perform threat modeling to anticipate and mitigate possible attack vectors Oversee vulnerability identification, prioritization, and remediation across systems Use cyber threat intelligence to guide security validation strategies and exploit development Requirements 3+ years of experience in security engineering, penetration testing, or a related field Strong expertise in exploit chaining and logic, with a demonstrated ability to sequence vulnerabilities for advanced exploitation Proficient in Python for writing custom exploits and automation scripts Solid knowledge of cyber threat intelligence, threat modeling, and vulnerability management practices Familiar with OWASP Top 10 vulnerabilities and API security issues like IDOR Experience configuring automated security validation tools and frameworks Good understanding of the OSI model and key network protocols, including DNS, BGP, and TCP/IP English proficiency at a B2+ level Nice to have Experience with Bash and Go for scripting and automation Familiarity with OAuth and Multi-Factor Authentication implementation and exploitation methods

Related jobs

See all Security Engineer jobs

Other jobs at EPAM Systems