Security Testing Lead: Penetration & Threat Modeling

EPAM Systems, Inc.; Poland; Remote; PLN 180,000 - 300,000; Full time

Job summary

EPAM Systems, Inc. is seeking a Lead Security Testing Engineer to drive security assessments, penetration testing, and vulnerability management for SaaS and on-prem solutions, with a focus on DNS/DHCP protocols.

This role demands deep technical expertise in application security, threat modeling, and secure development practices. You will guide development teams to build resilient security controls, integrate security into the SDLC, and mentor engineers through training sessions and hands-on

Qualifications

• 5+ years in vulnerability management and pen testing.
• Knowledge of application security principles and threat modeling.
• Experience with SAST/DAST tools and secure development practices.

Responsibilities

• Perform security assessments and penetration testing for SaaS and on-prem solutions focused on DNS/DHCP.
• Review and validate remediation across applications, cloud services, and infrastructure.
• Guide secure coding practices and integrate security requirements into the SDLC.
• Educate development teams through training and workshops on secure design and best practices.
• Collaborate with teams to implement effective security controls and threat modeling outputs.

Skills

Vulnerability management

Penetration testing

Application security

Threat modeling

Secure coding practices

Communication

English proficiency

Education

MS/M.Tech or BS/B.Tech in CS or related

Tools

Coverity

CodeQL

SonarQube

Contrast

Job description

EPAM Systems, Inc. is seeking a Lead Security Testing Engineer to drive security assessments, penetration testing, and vulnerability management for SaaS and on-prem solutions, with a focus on DNS/DHCP protocols.

This role demands deep technical expertise in application security, threat modeling, and secure development practices. You will guide development teams to build resilient security controls, integrate security into the SDLC, and mentor engineers through training sessions and hands-on