Overview

We are seeking a Senior Security Automation Engineer who is more than a traditional pentester — a developer at heart who understands how to orchestrate, script, and chain network and web application exploits so they run autonomously. In this role, you will design and scale automated security validation frameworks, weaponize exploits, and ensure safe execution across production environments.

Responsibilities

  • Design and sequence exploit chains by pairing vulnerabilities together (e.g., combining a low-severity information disclosure with an SSRF to achieve Remote Code Execution)
  • Develop custom exploits and automate complex multi-stage authentication scripts, handling OAuth, TOTP, and MFA programmatically
  • Configure, scale, and maintain continuous automated security validation tools such as Pentera, Cymulate, or Picus
  • Architect and extend custom Pentest Robots frameworks to support autonomous exploit execution
  • Perform in-depth assessments of network and web infrastructure, leveraging knowledge of the OSI model and protocols like DNS, BGP, and TCP/IP
  • Identify and validate web application vulnerabilities, including OWASP Top 10 and API flaws such as IDOR
  • Engineer automated exploit scripts that safely validate vulnerabilities without crashing live infrastructure or corrupting production databases
  • Collaborate with threat intelligence and vulnerability management teams to prioritize and address emerging risks
  • Contribute to threat modeling exercises to proactively identify attack paths and weaknesses

Requirements

  • 3+ years of experience in offensive security, security automation, or a related engineering role
  • Proficiency in Python for writing custom exploits and automation tooling
  • Expertise in exploit chaining and logic, with the ability to sequence vulnerabilities into end-to-end attack paths
  • Deep understanding of the OSI model and core network protocols (DNS, BGP, TCP/IP)
  • Knowledge of web application vulnerabilities, including the OWASP Top 10 and API flaws like IDOR
  • Background in configuring and scaling automated security validation platforms such as Pentera, Cymulate, or Picus
  • Skills in threat modeling and vulnerability management practices
  • Familiarity with cyber threat intelligence sources and how to operationalize them into automated validation
  • Capability to engineer safe exploit execution within live production environments without disruption
  • Excellent command of written and spoken English (B2+ level)

Nice to have

  • Programming experience with Go and Bash for tooling and automation
  • Understanding of OAuth flows and how to script against them
  • Experience automating authentication against Multi-Factor Authentication (MFA) systems

Ukraine

With us you can:

  • Work on a flexible schedule remotely or from any of our comfortable offices or coworking spaces in Ukraine
  • Receive the necessary equipment to perform your work tasks
  • Change projects and technology stacks within ••••
  • Gain experience in various business domains (Insurance, E-commerce, Healthcare, Finance, Travelling, Media, Artificial Intelligence, and more)
  • Relocation opportunities may be available for eligible candidates, depending on the role and openings at other •••• locations
  • Participate in volunteer, charity programs and communities (both technical and interest-based)

We focus on your professional growth:

  • You can plan your individual career path together with your manager
  • Receive regular feedback from colleagues
  • Improve your English for free with certified teachers (Speaking Clubs, client interview preparation courses, etc.)
  • Get the opportunity to undergo free training and certification in AWS, GCP, or Azure Clouds
  • Use the internal E-learn training program (18,200+ specialized training and mentoring programs)
  • Access corporate accounts on LinkedIn Learning, Get Abstract and other partner resources
  • Study at •••• Solution Architecture School with the instructors who are practicing architects
  • Develop as a leader, join Delivery Management, Resource Management, Leadership Essentials school and more
  • Participate in internal communities (500+ meetups, technical discussions, brainstorming sessions, online events and conferences annually)

What we offer:

  • Vacation and sick leave (including a sick leave without a medical certificate)
  • A wide range of Voluntary Medical Insurance programs providing both medical treatment and various preventive options (including sports activities)
  • Medical insurance for family members at corporate rates
  • Company support during significant life events (childbirth or adoption, marriage, etc.)
  • Support for psychological comfort: discounts on services from mental health specialists or coaches, thematic training
  • E-kids program - a free programming language training program for EPAMers' children

Ukraine (Remote)

Kindly note that this role supports remote work, but only from within Ukraine.

Ukraine (benefits may differ)

Kindly be advised that the set of benefits, including learning, certification, and other opportunities, may vary depending on the role you apply for. Our recruiter will be able to share more details about the specific opportunity during your general interview.

Ukraine (About ••••)

•••• strives to provide its global team of over 62,350 professionals in more than 55 countries with opportunities for professional growth from day one of collaboration. Our colleagues are the source of ••••'s success, so we value cooperation, strive to always understand our clients' business and aim for the highest quality standards. No matter where you are, you will join a dedicated, diverse community that will help you realize your potential to the fullest.