Lead Security Testing Engineer - Hybrid/Remote & Cloud Apps

EPAM Systems; Poland; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Health insurance

Multisport

Employee Stock Purchase Plan

Relocation assistance

Job summary

EPAM Systems seeks a Lead Security Testing Engineer to drive security assessments, penetration testing, and vulnerability management across SaaS and on‑prem environments focused on DNS/DHCP protocols. You will guide teams on secure coding and threat modeling throughout the SDLC, collaborating with development to implement robust security controls.

You will review findings from SAST/DAST/containers, validate remediations, and educate teams on best practices, aligning with ISO/NIST standards and

Qualifications

• 5+ years in vulnerability management and penetration testing.
• Knowledge of application security principles and threat modeling.
• Proficient in secure coding practices and vulnerability assessment.
• Background in scripting languages (Shell, Python, Golang).
• Experience with AWS, GCP, Azure and Kubernetes/container tech.
• Familiar with OWASP Top 10 and mitigation techniques.
• Experience with static/dynamic analysis and pentesting frameworks.
• Understanding of SDLC integration for security in agile teams.

Responsibilities

• Conduct security assessments, reviews, and pentesting for SaaS and on‑prem solutions.
• Review and validate vulnerability findings from SAST/DAST/containers and define tests.
• Validate remediations across apps, platforms, and infra to fix root causes.
• Plan and execute application security testing, including code reviews.
• Interpret test results and recommend remediation based on threats.
• Collaborate with developers to enforce secure coding practices and standards.
• Integrate threat modeling into the software development lifecycle.
• Educate teams on secure design principles and conduct security training.
• Design and implement access controls, encryption, and secure communications.
• Document findings with evidence supporting closure or remediation gaps.

Skills

Vulnerability management

Penetration testing

Threat modeling

Secure coding practices

Security assessments

SAST/DAST/DAST tools

Cloud security (AWS/GCP/Azure)

Kubernetes and containers

Education

MS/M.Tech or BS/B.Tech in Computer Science or related field

Tools

SAST tools

DAST tools

CodeQL

SonarQube

Coverity

Container security tooling

Job description

EPAM Systems seeks a Lead Security Testing Engineer to drive security assessments, penetration testing, and vulnerability management across SaaS and on‑prem environments focused on DNS/DHCP protocols. You will guide teams on secure coding and threat modeling throughout the SDLC, collaborating with development to implement robust security controls.

You will review findings from SAST/DAST/containers, validate remediations, and educate teams on best practices, aligning with ISO/NIST standards and