Senior AI Security & Test Engineer – Cloud Agent Platform

EPAM Systems; Łódź; Hybrid; PLN 200,000 - 280,000; Full time

Benefits offered by this job

Health insurance

Multisport card

Relocation opportunities

Employee stock purchase plan

Job summary

EPAM Systems is seeking a Senior Security & Test Engineer to join a team building an Enterprise Agent Development Platform. You will own security, functional and performance test suites for the A2A gateway and validate auth flows across agent channels.

The role requires 5+ years in security or QA, strong Python skills for test automation, and experience with k6/Locust for performance testing, Cedar policy testing, and AI/LLM threat modeling.

Qualifications

• 5+ years of experience in security engineering or quality assurance.
• Proficiency in Python for security test automation.
• Knowledge of OAuth 2.0 signed Agent Cards and JWT scope enforcement.
• Experience in performance testing using k6 and Locust.
• Expertise in Cedar policy testing and AI/LLM threat modeling.
• API security testing experience.

Responsibilities

• Own security, functional and performance test suites for the A2A gateway.
• Test Cedar policy enforcement across LOG_ONLY and ENFORCE modes.
• Design and execute functional and security test plans for agentic AI systems.
• Validate authentication and authorization flows across agent channels.
• Identify and mitigate security risks for agentic AI and LLM-based systems.
• Collaborate with engineering teams to strengthen the platform's overall security posture.
• Report and track defects, vulnerabilities and performance bottlenecks uncovered during testing.

Skills

Security engineering

Quality Assurance

Test design

Python

OAuth 2.0

JWT validation

Cedar policy testing

Threat modeling for AI/LLM

API security testing

Enforcement mechanism design

Tools

k6

Locust

AgentCore Runtime

LangGraph

Strands Agents

Job description

EPAM Systems is seeking a Senior Security & Test Engineer to join a team building an Enterprise Agent Development Platform. You will own security, functional and performance test suites for the A2A gateway and validate auth flows across agent channels.

The role requires 5+ years in security or QA, strong Python skills for test automation, and experience with k6/Locust for performance testing, Cedar policy testing, and AI/LLM threat modeling.