security engineer in automated security validation

The role drives continuous and scalable security validation across complex environments by autonomously orchestrating, scripting, and chaining network and web application exploits.

• Design and sequence exploit chains that combine multiple vulnerabilities to achieve higher-impact outcomes, such as pairing information disclosure with SSRF to reach Remote Code Execution
• Develop custom exploits and weaponized scripts to automate multi-stage attack scenarios
• Build and maintain automated authentication flows that handle OAuth, TOTP, and MFA programmatically
• Configure, scale, and operate continuous automated security validation platforms
• Engineer exploit scripts to safely validate vulnerabilities in live production environments without disrupting services or corrupting data
• Analyze network and web application attack surfaces to identify opportunities for automated exploitation
• Collaborate with security and engineering teams to translate manual pentesting techniques into repeatable, automated workflows
• Continuously improve the organization's offensive automation framework and tooling

• 5+ Years of experience in offensive security, penetration testing, or security engineering roles
• At least 1 year of relevant leadership experience
• Expertise in exploit chaining and attack logic, including sequencing low-severity findings into high-impact compromises
• Proficiency in Python for writing custom exploits and automating complex multi-stage attack scripts
• Experience configuring and scaling continuous automated security validation tools such as Pentera, Cymulate, or Picus, including custom Pentest Robots architectures
• In-depth knowledge of the OSI model and core network protocols, including DNS, BGP, and TCP/IP
• Understanding of web application vulnerabilities, including the OWASP Top 10 and API flaws such as IDOR
• Proven capability to engineer automated exploit scripts that safely validate vulnerabilities without crashing network infrastructure or corrupting production databases
• English proficiency at B1+ level or above
• Будет плюсом: Skills in Bash and/or Go for custom tooling and exploit development, familiarity with OAuth flows and programmatic handling of authentication, background in bypassing or automating Multi-Factor Authentication challenges

• Условий в вакансии нет