Skip To Main Content
epam-logo-black.svgepam-logo-black.svg
backBack to Search

Senior Security Engineer

Remote in Georgia, & 4 others
Security.Development& 9 others
Looking for something else?

Find a vacancy that works for you. Send us your CV to receive a personalized offer.

Find me a job
Choose an option

We are seeking a Senior Security Engineer who blends a developer's mindset with pentesting expertise, able to orchestrate, script, and chain network and web application exploits to operate autonomously.

Responsibilities
  • Chain vulnerabilities together to produce advanced exploitation outcomes, such as combining low-severity information disclosure with SSRF to achieve Remote Code Execution
  • Develop custom exploits and automate complex, multi-stage authentication scripts
  • Set up and scale continuous, automated security validation tools and frameworks
  • Use deep understanding of the OSI model and core network protocols to identify and resolve infrastructure vulnerabilities
  • Evaluate and fix web application vulnerabilities, including OWASP Top 10 issues and API flaws such as IDOR
  • Build automated exploit scripts that safely confirm vulnerabilities without disrupting live network infrastructure or damaging production databases
  • Perform threat modeling to anticipate and mitigate possible attack vectors
  • Oversee vulnerability identification, prioritization, and remediation across systems
  • Use cyber threat intelligence to guide security validation strategies and exploit development
Requirements
  • 3+ years of experience in security engineering, penetration testing, or a related field
  • Strong expertise in exploit chaining and logic, with a demonstrated ability to sequence vulnerabilities for advanced exploitation
  • Proficient in Python for writing custom exploits and automation scripts
  • Solid knowledge of cyber threat intelligence, threat modeling, and vulnerability management practices
  • Familiar with OWASP Top 10 vulnerabilities and API security issues like IDOR
  • Experience configuring automated security validation tools and frameworks
  • Good understanding of the OSI model and key network protocols, including DNS, BGP, and TCP/IP
  • English proficiency at a B2+ level
Nice to have
  • Experience with Bash and Go for scripting and automation
  • Familiarity with OAuth and Multi-Factor Authentication implementation and exploitation methods