We are looking for a Senior Security Engineer who blends security expertise with strong development skills to automate validation of real-world network and web vulnerabilities. You will build safe, repeatable exploit chains and frameworks that help strengthen client environments.

Responsibilities

- Design automated exploit chains that safely validate multi-step attack paths across web and network surfaces

- Build and maintain custom exploit tooling and scripts in Python to orchestrate autonomous validation flows

- Develop mechanisms to handle authentication and session workflows programmatically, including MFA and OAuth scenarios

- Implement continuous security validation frameworks and scale automated testing coverage across target environments

- Analyze vulnerabilities to determine chaining logic and realistic paths to impactful outcomes

- Validate findings without disrupting production systems by engineering guardrails, safety checks, and rollback plans

- Model threats and map exploit scenarios to prioritize remediation and reduce exposure

- Investigate threat intelligence to align validation scenarios with current attacker tactics and techniques

- Collaborate with engineering teams to communicate risk, propose fixes, and confirm remediation effectiveness

Requirements

- 3+ years of experience in security engineering with a development focus

- 3+ years of experience with Python for exploit development and automation

- Strong leadership skills to drive secure validation approaches and align stakeholders





- Proven project ownership skills to deliver automated security validation initiatives end to end

- Deep knowledge of OWASP Top 10 and common web and API attack paths

- Strong vulnerability management skills including prioritization and validation of findings

- Advanced threat modeling skills to identify exploit chains and realistic attacker paths

- Solid cyber threat intelligence skills to contextualize risks and techniques

- Strong communication skills to document findings and explain technical risk clearly

- Upper-Intermediate English proficiency (B2) for effective collaboration and reporting

Nice to have

- Bash scripting for automation and exploit tooling

- Go Language for performance-oriented security tooling

- Multi-Factor Authentication automation experience

- OAuth automation and token flow handling

We offer

- International projects with top brands

- Work with global teams of highly skilled, diverse peers

- Healthcare benefits

- Employee financial programs

- Paid time off and sick leave

- Upskilling, reskilling and certification courses

- Unlimited access to the LinkedIn Learning library and 22,000+ courses

- Integral career opportunities

- Volunteer and community involvement opportunities

- EPAM Employee Groups

- Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn

EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.

📌 Senior Security Engineer (Colombia)
🏢 EPAM Systems
📍 Colombia