QA Engineer Security Testing

Job Title

AI Security Testing Specialist

Design and execute functional and security testing strategies for AI platforms and agent based applications. Develop and maintain automated security testing frameworks using Python and pytest. Perform API security testing aligned with OWASP API security best practices. Validate authorization and policy enforcement mechanisms across agent workflows. Design and execute tests covering permit and deny logic, policy precedence, parameter level conditions, and enforcement controls.

Verify audit logging capabilities and ensure compliance with governance requirements. Perform threat modeling and security assessments for AI and agent based systems. Validate protections against AI specific attack scenarios, including prompt injection and identity spoofing. Develop and maintain test documentation, test cases, and quality assurance standards. Collaborate with engineering, architecture, and security teams to identify and resolve vulnerabilities. Support compliance validation and governance testing activities.

Contribute to continuous improvement of quality and security testing processes.

3+ years of experience in quality assurance, security testing, or software testing. Experience implementing automated security testing frameworks. Experience with API security testing and OWASP API security principles. Experience designing functional and security test cases and test strategies. Strong Python programming skills with experience using pytest. Knowledge of threat modeling methodologies and security testing practices. Experience validating authentication, authorization, and policy enforcement controls.

Experience working with enterprise applications and distributed systems. Strong analytical, troubleshooting, and documentation skills. Experience collaborating within agile software development environments.

Experience with AWS security testing and cloud security validation. Experience with Cedar policy testing tools and policy validation frameworks. Experience with regulatory compliance testing, including GDPR and SOC 2 requirements. Experience testing AI applications, agent based platforms, or machine learning systems. Knowledge of audit, governance, and risk management frameworks. Experience validating agent to agent communication and authorization controls. Understanding of AI security risks, including prompt injection attacks and agent identity spoofing.

Experience with Cloud Watch and security monitoring solutions. Provide your feedback on Biz Chat.

Vacation as per the laws of your country. We do ask you to take a proper rest. Health insurance. We help you to take out an insurance policy for you and your loved ones. Sick pay. 10 days without a doctor's note, afterwards - as per the laws of your country. Equal opportunities. Time off for state holidays according to the official calendar, regardless of the client's schedule.

Pleasant environment. Two large corporate parties and many small get-togethers for colleagues. Comfort service. Solving technical and everyday problems e about the perks List of benefits in PDF The benefits package may vary depending on the region and the type of contract.