Senior Security Automation Engineer

EPAM Systems; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

EPAM Systems Inc. is seeking a Senior Security Automation Engineer who crafts automated exploit chains and develops custom scripts to validate security across networks and web apps.

You will scale automated validation frameworks (Pentera, Cymulate, Picus) and engineer safe exploitation in production environments, collaborating with threat intel and vulnerability teams to mitigate emerging risks.

Qualifications

• 3+ years in offensive security, security automation, or related engineering.
• Proficient in Python for exploits and automation tooling.
• Able to chain vulnerabilities into end-to-end attack paths.
• Deep knowledge of OSI model and core network protocols.
• Familiar with OWASP Top 10 and API flaws like IDOR.
• Experience configuring and scaling automated validation platforms such as Pentera/Cymulate/Picus.
• Strong threat modeling and vulnerability management practices.
• Familiar with cyber threat intelligence and operationalization.
• Ability to engineer safe exploit execution in live environments.
• Excellent written and spoken English (B2+).

Responsibilities

• Design and sequence exploit chains by pairing vulnerabilities.
• Develop custom exploits and automate complex authentication scripts.
• Configure and scale automated security validation tools and extend frameworks.
• Perform assessments of network and web infrastructure using OSI concepts.
• Identify and validate web vulnerabilities including OWASP Top 10 and API flaws.
• Engineer automated exploit scripts that avoid production disruption.
• Collaborate with threat intel and vulnerability teams to address risks.
• Contribute to threat modeling exercises to identify attack paths.

Skills

Python programming

Exploit chaining

Threat modeling

Vulnerability management

English (B2+)

Tools

Pentera

Cymulate

Picus

Job description

We are seeking a Senior Security Automation Engineer who is more than a traditional pentester — a developer at heart who understands how to orchestrate, script, and chain network and web application exploits so they run autonomously. In this role, you will design and scale automated security validation frameworks, weaponize exploits, and ensure safe execution across production environments.

Responsibilities

• Design and sequence exploit chains by pairing vulnerabilities together (e.g., combining a low‑severity information disclosure with an SSRF to achieve Remote Code Execution)
• Develop custom exploits and automate complex multi‑stage authentication scripts, handling OAuth, TOTP, and MFA programmatically
• Configure, scale, and maintain continuous automated security validation tools such as Pentera, Cymulate, or Picus Architect and extend custom Pentest Robots frameworks to support autonomous exploit execution
• Perform in‑depth assessments of network and web infrastructure, leveraging knowledge of the OSI model and protocols like DNS, BGP, and TCP/IP
• Identify and validate web application vulnerabilities, including OWASP Top 10 and API flaws such as IDOR
• Engineer automated exploit scripts that safely validate vulnerabilities without crashing live infrastructure or corrupting production databases
• Collaborate with threat intelligence and vulnerability management teams to prioritize and address emerging risks
• Contribute to threat modeling exercises to proactively identify attack paths and weaknesses

Requirements

• 3+ years of experience in offensive security, security automation, or a related engineering role
• Proficiency in Python for writing custom exploits and automation tooling
• Expertise in exploit chaining and logic, with the ability to sequence vulnerabilities into end‑to‑end attack paths
• Deep understanding of the OSI model and core network protocols (DNS, BGP, TCP/IP)
• Knowledge of web application vulnerabilities, including the OWASP Top 10 and API flaws like IDOR
• Background in configuring and scaling automated security validation platforms such as Pentera, Cymulate, or Picus
• Skills in threat modeling and vulnerability management practices
• Familiarity with cyber threat intelligence sources and how to operationalize them into automated validation
• Capability to engineer safe exploit execution within live production environments without disruption
• Excellent command of written and spoken English (B2+ level)

Nice to have

• Programming experience with Go and Bash for tooling and automation
• Understanding of OAuth flows and how to script against them
• Experience automating authentication against Multi‑Factor Authentication (MFA) systems