Senior Security Engineer

EPAM Systems; Turkey; On-site; TRY 5,025,000 - 8,040,000; Full time

Benefits offered by this job

Private health insurance

Well-being events

Extra leave days

Referral bonuses

Access to 2,500+ internal courses

English courses by certified teachers

Job summary

EPAM Systems Inc. is seeking a Senior Security Engineer who blends development mindset with pentesting skills to orchestrate, script, and chain exploits for autonomous validation.

You will sequence vulnerabilities, write automated exploits, and scale security validation frameworks across networks and web apps. Responsibilities include threat modeling, vulnerability management, and leveraging cyber threat intelligence to drive secure engineering practices.

Qualifications

• 5+ years of experience in security engineering, penetration testing, or related roles.
• Expertise in exploit chaining and logic, with proven ability to sequence vulnerabilities for advanced exploitation.
• Proficiency in Python for scripting custom exploits and automation.
• Knowledge of cyber threat intelligence, threat modeling, and vulnerability management practices.
• Familiarity with OWASP Top 10 vulnerabilities and API security flaws such as IDOR.
• Background in configuring automated security validation tools and frameworks.
• Understanding of the OSI model and core network protocols, including DNS, BGP, and TCP/IP.
• Proficiency in English at a B2+ level.
• Nice to have Bash and Go Language for scripting and automation.
• Familiarity with OAuth and Multi-Factor Authentication implementation and exploitation techniques.

Responsibilities

• Sequence vulnerabilities to achieve advanced exploitation outcomes.
• Write custom exploits and automate multi-stage authentication scripts.
• Configure and scale automated security validation tools and frameworks.
• Apply OSI model and network protocol knowledge to identify infra vulnerabilities.
• Assess and remediate web app vulnerabilities including OWASP Top 10 and API flaws.
• Develop threat modeling exercises to anticipate attack vectors.
• Manage vulnerability identification, prioritization, and remediation across systems.
• Leverage cyber threat intelligence to inform validation strategies.

Skills

Exploit chaining

Python scripting

Penetration testing

Threat modeling

Cyber threat intelligence

Network security

English communication

Job description

We are seeking a Senior Security Engineer who combines the mindset of a developer with the skills of a pentester, capable of orchestrating, scripting, and chaining network and web application exploits to run autonomously.ResponsibilitiesSequence vulnerabilities together to achieve advanced exploitation outcomes, such as pairing low-severity information disclosure with SSRF to achieve Remote Code ExecutionWrite custom exploits and automate complex multi-stage authentication scriptsConfigure and scale continuous, automated security validation tools and frameworksApply deep knowledge of the OSI model and core network protocols to identify and address infrastructure vulnerabilitiesAssess and remediate web application vulnerabilities, including OWASP Top 10 issues and API flaws like IDOREngineer automated exploit scripts that safely validate vulnerabilities without crashing live network infrastructure or corrupting production databasesConduct threat modeling exercises to anticipate and mitigate potential attack vectorsManage vulnerability identification, prioritization, and remediation processes across systemsLeverage cyber threat intelligence to inform security validation strategies and exploit developmentRequirements5+ years of experience in security engineering, penetration testing, or related rolesExpertise in exploit chaining and logic, with proven ability to sequence vulnerabilities for advanced exploitationProficiency in Python for scripting custom exploits and automationKnowledge of cyber threat intelligence, threat modeling, and vulnerability management practicesFamiliarity with OWASP Top 10 vulnerabilities and API security flaws such as IDORBackground in configuring automated security validation tools and frameworksUnderstanding of the OSI model and core network protocols, including DNS, BGP, and TCP/IPProficiency in English at a B2+ levelNice to haveSkills in Bash and Go Language for scripting and automationFamiliarity with OAuth and Multi-Factor Authentication implementation and exploitation techniquesWe offerCONTINUOUS UPSKILLING, LEARNING & DEVELOPMENTDiversity of tasks and projectsAssessment center for objective review of competency levelPersonal development planMentoring programs and leadership developmentCertification and professional development supportAccess to learning platforms including more than 2,500 internal coursesEnglish courses taught by certified teachersCORPORATE BENEFITSExtra leave daysReferral bonusesCOMPENSATION PACKAGECompetitive compensation paid in USDRegular salary and performance reviewsMEDICAL & HEALTHCAREPrivate health insuranceWell-being eventsWORKING ENVIRONMENTRecreation areas and kitchensTea, coffee and snacksSports equipment and game consolesIT EquipmentMicrosoft’s Software Assurance Home Use Program (HUP)Please note that our Talent Attraction Team reviews applications and CVs submitted in English.EPAM is global leader in AI transformation engineering and integrated consulting, serving Forbes Global 2000 companies and ambitious startups. With over thirty years of expertise in custom software, product and platform engineering, we empower our clients to become AI-Native enterprises, driving measurable value from innovation and digital investments.