Senior Security Tester

We are seeking a skilled and proactive Senior Security Tester with expertise in vulnerability management and strong engineering skills to join our team. In this role, you will manage vulnerabilities within a secure software repository and deliver clear, comprehensive updates and justifications for Common Vulnerabilities and Exposures affecting our products. Additionally, you will contribute to automating manual processes to enhance operational efficiency and scalability.
We accept CVs in English only.

#LI-DNI#EasyApply

Responsibilities

• Identify, analyze, and prioritize vulnerabilities in Mobile and Web applications
• Provide technical justifications, mitigations, and updates for Common Vulnerabilities and Exposures, ensuring alignment with industry best practices
• Collaborate with development, operations, and security teams to ensure vulnerabilities are remediated promptly
• Deliver detailed vulnerability statements and provide justifications and remediation strategies for CVEs
• Respond to inquiries related to vulnerability disclosures with clarity and precision
• Enrich and maintain an extensive knowledge base of vulnerability reports and justifications for internal and external use
• Develop and implement automation scripts, tools, and workflows to streamline vulnerability management processes
• Create dashboards and reports to track and communicate vulnerability metrics
• Serve as a technical liaison between internal security teams, product owners, and external partners to ensure alignment on vulnerability management goals
• Contribute to the continuous improvement of security operations through process refinement and innovation

• Bachelor's Degree in Computer Science or a related field; Master's degree preferred
• Over 3 years of experience in Java development with a focus on security applications
• Hands-on experience with vulnerability scanning tools and CVE databases such as NowSecure and HCL App Scan
• Proficiency in manual penetration testing for both mobile and Web applications
• Advanced skills in scripting and automation using Python, with familiarity in frameworks like Ansible or Terraform
• Experience with containerized environments such as Docker and Kubernetes, alongside secure software development practices
• Understanding of common security standards and frameworks including OWASP, NIST, ISO 27001, and PSI DSS
• Familiarity with cloud platforms like AWS, Azure, GCP, and their security configurations
• Knowledge of security orchestration and automation platforms
• Strong written and verbal communication skills to effectively translate complex technical concepts
• Ability to manage multiple tasks and priorities in a dynamic, collaborative environment
• Analytical mindset and problem-solving skills with high attention to detail
• Fluent English skills at a B2 level or higher

• Experience with secure software repositories and hardened containers

• Learning Culture - We want you to be the best version of yourself, that is why we offer unlimited access to learning platforms, a wide range of internal courses, and all the knowledge you need to grow professionally
• Health Coverage - Health and wellness are important, that is why we have you and up to four family members in a premiere health plan. We have a couple of options, so you can choose what is best for you and your family
• Visual Benefit - Seeing your work for us would be a sight for sore eyes. We want your vision to always be at 100% which is why we offer up to $200.000 COP for any visual health expenses
• Life Insurance Plan - We have partnered with MetLife to offer a full-coverage Ife insurance plan. So, your family is covered, even if you are gone
• Medical Leave Coverage - We are one of the few companies that cover 100% of your medical leave, for up to 90 days. Your health is the most important thing to us
• Professional Growth Opportunities - We have designed a highly competitive and complete development process, where you will have all the tools to get where you have always wanted to be, personally and professionally
• Stock Option Purchase Plan - As an EPAMer you can be more than just an employee, you will also have the opportunity to purchase stock at a reduced price and become a part owner of our organization
• Additional Income - Besides your regular salary, you will also have the chance to earn extra income by referring talent, being a technical interviewer, and many more ways
• Community Benefit - You will be part of a worldwide community of over 50,000 employees, where you can learn, challenge yourself, stand out, and share your knowledge and experience with multicultural teams!