Senior AppSec & Vulnerability Validator (Remote)

EPAM Systems Inc; Polska; Hybrid; PLN 180,000 - 300,000; Full time

Benefits offered by this job

Health insurance

Multisport card

Stock Purchase Plan

Relocation opportunities

English classes

Job summary

EPAM Systems Inc. is seeking an experienced Application Security & Vulnerability Validation Engineer to bridge automated security scanning and product engineering.

You will validate exploits, QA AI-generated patches, and ensure secure code fixes are production-ready, within a structured threat modeling framework. Role emphasizes threat modeling, reproducible evidence, and collaboration with software owners to meet remediation SLAs, while leveraging fuzz testing and differential testing in a

Qualifications

• 5+ years of hands-on experience in Application Security, Product Security, or Software Engineering with focus on vulnerability validation, secure code review, and test automation.
• Proficiency in reading, writing, and debugging code in two or more core languages (C++, Go, Java, Python).
• Deep understanding of secure coding standards and memory safety, and high attention to detail when reviewing code diffs for regressions.

Responsibilities

• Construct minimal local test environments and reproduction harnesses to validate findings.
• Distinguish true vulnerabilities from false positives and attach reproducible evidence.
• Review and validate code patches before routing to product code owners.
• Inspect code diffs for logic flaws, hallucinations, and memory safety issues.
• Execute unit, integration, and differential tests to confirm fix efficacy and build stability.
• Route verified patches to engineers and track remediation SLAs.

Skills

C++

Go

Java

Python

Security analysis

Test automation

Tools

SAST tools

Fuzz testing tools

Differential testing

Job description

EPAM Systems Inc. is seeking an experienced Application Security & Vulnerability Validation Engineer to bridge automated security scanning and product engineering.

You will validate exploits, QA AI-generated patches, and ensure secure code fixes are production-ready, within a structured threat modeling framework. Role emphasizes threat modeling, reproducible evidence, and collaboration with software owners to meet remediation SLAs, while leveraging fuzz testing and differential testing in a