Senior Security Penetration Tester

EPAM Systems; Polska; Hybrid; PLN 140,000 - 230,000; Full time

Benefits offered by this job

English classes

Stock Purchase Plan

Relocation opportunities

Job summary

EPAM Systems Inc is seeking a research-minded Senior Security Penetration Tester in Poland to tackle OT/ICS security, exploit development and AI/LLM testing. You will operate safely in real industrial environments, craft working exploits, and assess LLM agents and AI systems with adversarial mindset.

You will deliver end-to-end client engagements, contribute to a zero-day program, and help build AI-driven tooling to scale offensive capabilities, while communicating findings clearly to engineers

Qualifications

• 5+ years in hands-on penetration testing and offensive security.
• Experience in OT/ICS, exploit development, or AI/LLM security.
• Strong Python/C/C++, basic x86/x64/ARM assembly knowledge.

Responsibilities

• Plan and execute OT/ICS penetration tests with safety-first approach.
• Develop working exploits and assess LLM/agentic AI surfaces.
• Deliver end-to-end client engagements and document findings.

Skills

Penetration testing

OT/ICS security

Exploit development

AI/LLM security

Education

Bachelor's degree in CS/InfoSec/related

Tools

IDA Pro

Ghidra

WinDbg

Burp Suite

Metasploit

Job description

We are looking for a research-minded Senior Security Penetration Tester who sits at the intersection of three disciplines: operational technology (OT/ICS) security, exploit development and zero-day discovery, and offensive testing of AI and agentic systems.This is not a scanner-driven role. You will break real industrial environments safely, write working exploits for vulnerabilities you find yourself, and attack LLM applications and autonomous agents the way a capable adversary would. You will deliver client engagements end-to-end, contribute original research to the client's zero-day program, and help build the AI-driven tooling that scales our offensive capability.The role suits someone who enjoys going deep on hard targets and can explain what they found to both engineers and executives.ResponsibilitiesPlan and execute safety-first penetration tests of OT/ICS environments (water and wastewater, energy, manufacturing, building systems), including passive asset discovery, Purdue-model segmentation testing and IT-to-OT pivot analysisAssess PLCs, RTUs, HMIs, SCADA servers, historians and engineering workstations across major vendors (e.g., Rockwell/Allen-Bradley, Siemens, Schneider Electric) and SCADA platforms (e.g., VTScada, Ignition, AVEVA/Wonderware)Test industrial protocols such as Modbus/TCP, DNP3, EtherNet/IP/CIP, S7comm, OPC UA, BACnet and IEC 60870-5-104/61850 for authentication, integrity and logic-manipulation weaknessesBuild and use lab or digital-twin replicas to validate attack paths before touching production; operate strictly within client-approved rules of engagement, change windows and safety constraintsMap findings to ISA/IEC 62443, NIST SP 800-82 and MITRE ATT&CK for ICS, with remediation guidance that is realistic for plant operationsConduct vulnerability research on binaries, firmware, embedded/IoT devices, web applications and enterprise software using reverse engineering, source code review and fuzzing (coverage-guided, protocol-aware and grammar-based)Write reliable proof-of-concept and weaponized exploits for memory corruption (stack/heap overflows, use-after-free, type confusion), logic flaws and authentication bypassAttack LLM applications and agentic AI systems, assessing how models, retrieval, tools and permissions combine to create attack surfaceContribute original research to the client's zero-day program and help build AI-driven tooling that scales offensive capabilityDeliver client engagements end to end and communicate findings clearly to both engineers and executivesRequirementsBachelor's degree in Computer Science, Information Security, Electrical/Control Engineering or a related field, or equivalent practical experience5+ years of hands-on penetration testing and offensive security experience, including significant depth in at least two of: OT/ICS security, exploit development/vulnerability research, and AI/LLM securityBackground in OT/ICS penetration testing on real industrial environments or high-fidelity labs, with a strong grasp of safety-first testing practicesShowcase of exploit-writing ability, evidenced by original vulnerability research such as CVE credits, published advisories or exploits, conference talks, or high-level bug bounty/CTF resultsHands-on experience testing LLM applications or agentic AI systems, with an understanding of how models, retrieval, tools and permissions combine to create attack surfaceStrong programming skills in Python and C/C++, with working knowledge of x86/x64 and ARM assembly; Bash/PowerShell requiredProficiency with reverse engineering and debugging tools such as IDA Pro, Ghidra and Binary Ninja, alongside WinDbg and GDB with pwndbg/GEFCompetency in fuzzers (AFL++, libFuzzer, boofuzz) and offensive tooling (Burp Suite, Metasploit, Nmap), as well as Wireshark with ICS dissectors and C2 frameworks such as Cobalt Strike or SliverFamiliarity with industry standards and frameworks, including OWASP Top 10, CVE/CWE and OSSTMM, along with NIST, MITRE ATT&CK, ISA/IEC 62443 and MITRE ATLASExcellent written and spoken English; able to convey complex technical concepts to technical and non-technical audiencesBased in Europe and eligible to work through EPAM; able to overlap with US business hours for client meetings, and available for occasional travel (e.g., on-site OT assessments) when requiredNice to haveKnowledge of Rust or GoRelevant offensive security certifications (considered a plus, not a substitute for demonstrated skill)We offerWe gather like-minded people:Top tech minds driving innovation in AI, cloud and digital platform modernizationSupportive team and agile, startup-like cultureHybrid by design mode and opportunity to work remotely within PolandChance to work abroad for up to 60 days annuallyBusiness-driven relocation opportunitiesWe provide growth opportunities:Career development programsThought leadership, mentoring, soft skills and well-being programsCertification (Anthropic, Gemini, GCP, Azure, AWS)English classesWe cover it all:Stable payParticipation in the Employee Stock Purchase Plan with a 15% discountBenefits package (health insurance, multisport, shopping vouchers)Referral bonuses up to $2,000Offices featuring entertainment and relaxation zones, table tennis and football, free snacks, coffee and moreCorporate, social and well-being eventsPlease, note:Benefits listed above are available to employees onlyWe are open for working with Contractors. Terms of B2B cooperation agreements are agreed individuallyWe will reach out to selected candidates exclusivelyEPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.