Senior Security Testing Lead – DNS/DHCP & Cloud

EPAM Systems; Łódź; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Hybrid work model

Relocation opportunities

Employee stock purchase plan

Health insurance

Multisport

Shopping vouchers

English classes

Career development programs

Job summary

EPAM Systems invites a Lead Security Testing Engineer to drive security assessments, penetration testing, and vulnerability management for SaaS and on-prem solutions. You will guide teams toward resilient systems, enforce secure coding practices, and integrate threat modeling into the software development lifecycle.

The role requires deep expertise in application security, incident remediation, and collaboration with cross-functional teams.

Qualifications

• Minimum 5+ years in vulnerability management and penetration testing.
• Solid understanding of application security principles and threat modeling.
• Experience with secure coding practices and vulnerability assessment.
• Development background in Shell, Python, or Golang is preferred.
• Hands-on cloud experience (AWS/GCP/Azure) and container tech (Kubernetes).
• Familiarity with OWASP Top 10 and mitigation techniques.
• Knowledge of SDLC integration with security tooling (SAST/DAST).
• Strong communication to explain technical concepts to non-technical stakeholders.

Responsibilities

• Perform security assessments, reviews, and penetration testing for SaaS and on-prem systems.
• Review vulnerabilities from SAST, DAST, SCA, containers, and infrastructure scanners.
• Validate remediations across apps, clouds, and development toolchains.
• Plan, execute, and analyze application security testing and code reviews.
• Interpret test results and propose remediation based on threats.
• Collaborate with dev teams to enforce secure coding practices and standards.
• Integrate threat modeling into the SDLC and guide secure design decisions.
• Provide guidance on secure design principles and security discussions.
• Work with teams to implement strong access controls, encryption, and secure communication.
• Educate teams on secure coding and vulnerability trends via trainings.

Skills

Vulnerability management

Application security

Threat modeling

Secure coding

Shell scripting

Python

Golang

OWASP Top 10

Authentication/Authorization

Cryptography

Security standards

Communication

Education

MS/M.Tech or BS/B.Tech in Computer Science or related field

Tools

AWS

GCP

Azure

Kubernetes

Docker

CodeQL

Coverity

SonarQube

Contrast

SAST/DAST tools

Job description

EPAM Systems invites a Lead Security Testing Engineer to drive security assessments, penetration testing, and vulnerability management for SaaS and on-prem solutions. You will guide teams toward resilient systems, enforce secure coding practices, and integrate threat modeling into the software development lifecycle.

The role requires deep expertise in application security, incident remediation, and collaboration with cross-functional teams.