We are seeking a Chief Security Engineer for a developer-minded offensive security leader who can automate exploit chains across network and web targets at scale. You will script and orchestrate safe, production-aware validation using threat intelligence, threat modeling, and continuous security validation platforms.

Responsibilities

- Chain vulnerabilities to amplify impact, for example combining low-severity information disclosure with SSRF to reach Remote Code Execution

- Create custom exploits and automate sophisticated multi-stage authentication flows

- Implement and scale continuous, automated security validation tools to enable ongoing vulnerability management

- Use OSI model expertise and core network protocols to evaluate infrastructure security posture

- Detect and validate web application weaknesses, including OWASP Top 10 issues and API flaws such as IDOR

- Build automated exploit scripts that validate vulnerabilities safely without crashing live network infrastructure or corrupting production databases

- Conduct threat modeling to forecast attack paths and help prioritize remediation

- Apply cyber threat intelligence to guide exploit development and validation approaches

Requirements

- Proven track record with 5+ years in security engineering or offensive security roles

- Expertise in cyber threat intelligence, threat modeling, and vulnerability management

- Hands-on proficiency in Python to script and automate exploit chains

- Deep understanding of OWASP Top 10 vulnerabilities and common web application security flaws





- Solid background configuring and scaling automated security validation frameworks such as Pentera, Cymulate, Picus, or custom Pentest Robots architectures

- Strong knowledge of the OSI model and key network protocols, including DNS, BGP, and TCP/IP

- Demonstrated ability to engineer exploit scripts that safely validate vulnerabilities in production environments without disruption

- English proficiency at B2 level (Upper-Intermediate) or higher

Nice to have

- Willingness to use Bash and Go for scripting and automation work

- Familiarity with Multi-Factor Authentication and programmatic handling of TOTP

- Working knowledge of OAuth protocols for automating authentication flows

We offer

- International projects with top brands

- Work with global teams of highly skilled, diverse peers

- Healthcare benefits

- Employee financial programs

- Paid time off and sick leave

- Upskilling, reskilling and certification courses

- Unlimited access to the LinkedIn Learning library and 22,000+ courses

- General career opportunities

- Volunteer and community involvement opportunities

- EPAM Employee Groups

- Award-winning culture recognized by Glassdoor, Newsweek and LinkedIn

EPAM is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, disability, protected veteran status, or any other characteristic protected by applicable law.

📌 Chief Security Engineer (Colombia)
🏢 EPAM Systems
📍 Colombia