Senior Security Test / QA Engineer

We are looking for a Senior Security Test / QA Engineer to join our team building an Enterprise Agent Development Platform — a production-grade, cloud-native ecosystem that enables engineering teams to define, orchestrate, deploy and observe AI agents at scale. The platform standardizes agent development across the organization using LangGraph and Strands Agents on AWS AgentCore Runtime, providing a single-file developer experience where the platform handles runtime, tooling, observability and deployment automatically. The initiative spans agent framework design, runtime architecture, marketplace integration, CI/CD automation and enterprise-grade observability — reducing agent development from months to days while enforcing consistent security, quality and governance standards.

Responsibilities

• Design and execute functional, security and performance test suites for runtime controls
• Conduct security testing including penetration testing and threat modeling
• Perform agentic AI threat modeling covering OWASP Top 10 for LLMs including prompt injection as policy bypass and agent identity spoofing
• Build Python test automation using pytest
• Validate A2A policy enforcement
• Verify audit log accuracy and completeness
• Own the functional policy test suite covering permit/deny correctness, forbid-overrides-permit and parameter-level conditions
• Manage LOG_ONLY to ENFORCE mode switching validation
• Develop functional and security test design strategies

Requirements

• 3+ years of experience in quality assurance or security testing
• Background in automated security test suite implementation
• Expertise in API security testing (OWASP API Top 10)
• English proficiency at B2 level or higher

Nice to have

• Background in AWS security testing
• Familiarity with Cedar policy test tooling
• Knowledge of regulatory compliance testing (GDPR, SOC 2)

Benefits

We believe that the greatest strength of the company is its people. EPAM is fully committed to help its employees to reach their full potential and achieve their professional goals through continues learning. With this in mind, we would like to introduce to you few of the many opportunities and services which we believe will help you expand your current knowledge:

• Full access to cutting-edge tools and technologies
• Competitive compensation depending on experience and skills
• All-around Social package: professional & soft skills training, medical & family care programs, sports
• Free English classes
• Unlimited access to LinkedIn learning solutions
• Continuous experience exchange with experts and professionals worldwide
• Friendly team and comfortable working environment
• Engineering, corporate, and social events within and outside the Company
• Flexible working schedule
• Opportunities for self-realization