Senior Security & Test Engineer for AI Agent Platform

EPAM Systems; Polska; Hybrid; PLN 240,000 - 360,000; Full time

Benefits offered by this job

Hybrid by design

Remote within Poland

60 days abroad

Relocation support

Job summary

EPAM Systems seeks a Senior Security & Test Engineer to join a team building an Enterprise Agent Development Platform, a cloud-native ecosystem enabling AI agents at scale. You will secure the A2A gateway and own security, functional and performance test suites across complex agent systems.

The role requires 5+ years in security or QA, Python automation, Cedar policy testing, and experience with k6/Locust for performance testing. Hybrid work in Poland with global exposure is offered.

Qualifications

• 5+ years of experience in security engineering or quality assurance.
• Knowledge of the A2A trust model including OAuth 2.0 signed Agent Cards and JWT validation with token scope enforcement for agent channels.
• Proficiency in Python for security test automation.
• Experience in performance testing using k6 and Locust with benchmarking for cloud APIs.
• Expertise in Cedar policy testing including permit/deny correctness forbid-override-permit logic and LOG_ONLY vs ENFORCE mode.
• Background in agentic AI/LLM threat modeling covering OWASP Top 10 for LLMs excessive agency and tool parameter exfiltration.
• Expertise in API security testing and security test design for AI/agent systems beyond REST APIs.
• Experience in enforcement mechanism design or implementation.

Responsibilities

• Own security, functional and performance test suites for the A2A gateway.
• Test Cedar policy enforcement correctness across LOG_ONLY and ENFORCE modes.
• Conduct trust model gap analysis for non-AgentCore A2A agents.
• Design and execute functional and security test plans for agentic AI systems.
• Validate authentication and authorization flows across agent communication channels.
• Identify and mitigate security risks specific to agentic AI and LLM-based systems.
• Collaborate with engineering teams to strengthen the platform's overall security posture.
• Report and track defects, vulnerabilities and performance bottlenecks uncovered during testing.

Skills

Security testing

Quality assurance

Python

API security testing

Performance testing

Threat modeling

Agent/AI security

Enforcement design

Test design

OAuth 2.0 / JWT

Tools

k6

Locust

Cedar policy testing

AgentCore Runtime

AWS

Python testing

Job description

EPAM Systems seeks a Senior Security & Test Engineer to join a team building an Enterprise Agent Development Platform, a cloud-native ecosystem enabling AI agents at scale. You will secure the A2A gateway and own security, functional and performance test suites across complex agent systems.

The role requires 5+ years in security or QA, Python automation, Cedar policy testing, and experience with k6/Locust for performance testing. Hybrid work in Poland with global exposure is offered.