Security Test Engineer (Python)

Intellias; Poland; On-site; PLN 120,000 - 210,000; Full time

Job summary

Intellias is looking for a Security Test Engineer to validate security, reliability, and correctness of authorization and policy enforcement systems used in AI agent platforms. The role combines security testing, automated test development, API security validation, and policy verification.

The ideal candidate has strong experience in security-focused QA, test automation with Python, and modern application security practices.

Qualifications

• Security testing, including pen testing and threat modelling.
• Ownership of functional policy test suites: permit/deny, precedence, and mode switching.
• Experience with automated security test development (Python/pytest).
• API security validation following OWASP API Top 10.

Responsibilities

• Design and execute functional and security test strategies for policy-driven authorization systems.
• Develop and maintain automated security and policy validation test suites using Python and pytest.
• Validate permit/deny decisions, policy precedence, and access controls across workflows.
• Test transitions between LOG_ONLY and ENFORCE policy modes and enforce outcomes.

Skills

Security testing

Threat modelling

Test automation

Audit log validation

Policy testing

API security testing

Tools

Python

pytest

OWASP API Top 10

Job description

We are looking for a Security Test Engineer to validate the security, reliability, and correctness of authorization and policy enforcement systems used in AI agent platforms. The role combines security testing, automated test development, API security validation, and policy verification. The ideal candidate has strong experience in security-focused QA, test automation with Python, and modern application security practices.

What project we have for you

Our customer is a multinational corporation with more than a century of history and offices in over 180 countries. Their most ambitious goal at the time is to introduce a range of Reduced-Risk Products (RRPs). The target audience is more than 1 billion consumers around the globe. IT platform hosts 700+ applications.

Intellia’s mission is to help the client with the engineering of a comprehensive software ecosystem for a game-changing IoT product on the margin of innovative consumer experience and cutting-edge technology. Our teams are involved in the engineering of core platform components for best-in-class eCommerce, Digital Marketing and IoT solutions. As an Engineer, you will become a part of Core Architecture Team and be responsible for the architecture, implementation of best practices in our Digital Engineering Enterprise Platform.

The Platform is a set of services and internet applications that accelerate the development and delivery of software applications by taking care of common SDLC challenges. The Platform provides access and consumption for engineering teams to a set of services, technologies, practices for their development and for operating their application, ensuring a set of compliance and best practices.

What you will do

• Design and execute functional and security test strategies for policy-driven authorization systems.
• Develop and maintain automated security and policy validation test suites using Python and pytest.
• Validate permit/deny decisions, policy precedence rules, parameter-level access controls, and policy evaluation correctness.
• Test transitions between LOG_ONLY and ENFORCE policy modes and verify expected enforcement behavior.
• Perform API security testing based on OWASP API Top 10 recommendations.
• Conduct security assessments, penetration testing, and threat modeling exercises for platform services and AI agent workflows.
• Design and execute test scenarios covering agent identity spoofing, prompt injection, policy bypass attempts, and other agentic AI attack vectors.
• Validate audit logging, traceability, and security event generation for authorization decisions.
• Verify A2A policy enforcement mechanisms across agent interactions and distributed workflows.
• Collaborate with engineering and security teams to identify vulnerabilities and improve platform security posture.
• Maintain security test documentation, reports, and compliance evidence where required.

What you need for this

Security testing (pen testing, threat modeling)

• Agentic AI threat modelling (OWASP Top 10 for LLMs’: ‘prompt injection as policy bypass, agent identity spoofing)
• Audit log validation
• Functional policy test suite ownership (permit/deny correctness, forbid-overrides-permit, parameter-level conditions, LOG_ONLY → ENFORCE mode switching)
• Functional and security test design

Experience:

• 4+ years quality assurance or security testing
• Automated security test suite implementation
• API security testing (OWASP API Top 10)

Will be a plus:

• AWS security testing experience
• Regulatory compliance testing (GDPR, SOC 2)