QA Engineer with Security Testing

Aether Biomedical; United States; Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Vacation days up to 26 business days

Illness/special days off

Health and life insurance

MyBenefit platform with Multisport

Flexible workplace

Certification reimbursement

Job summary

Aether Biomedical is seeking a QA Engineer with Security Testing experience to help validate and govern an enterprise AI platform and agent-based solutions. You will design functional and security tests, implement automated testing frameworks, and verify policy enforcement across complex workflows.

Join a team focused on secure AI operations, auditability, and governance, with hybrid work options and opportunities to advance in security testing and enterprise software reliability.

Qualifications

• 3+ years of experience in QA, security testing, or software testing.
• Experience implementing automated security testing frameworks.
• Experience with API security testing and OWASP API security principles.
• Experience designing functional and security test cases and test strategies.
• Strong Python programming skills with pytest.
• Knowledge of threat modeling methodologies and security testing practices.
• Experience validating authentication, authorization, and policy enforcement controls.
• Experience working with enterprise applications and distributed systems.
• Strong analytical, troubleshooting, and documentation skills.
• Experience collaborating within agile software development environments.
• Experience testing AI applications, agent based platforms, or machine learning systems.

Responsibilities

• Design and execute functional and security testing strategies for AI platforms and agent based applications.
• Develop and maintain automated security testing frameworks using Python and pytest.
• Perform API security testing aligned with OWASP API security best practices.
• Validate authorization and policy enforcement mechanisms across agent workflows.
• Design and execute tests covering permit and deny logic, policy precedence, parameter level conditions, and enforcement controls.
• Verify audit logging capabilities and ensure compliance with governance requirements.
• Perform threat modeling and security assessments for AI and agent based systems.
• Validate protections against AI specific attack scenarios, including prompt injection and identity spoofing.
• Develop and maintain test documentation, test cases, and quality assurance standards.
• Collaborate with engineering, architecture, and security teams to identify and resolve vulnerabilities.
• Support compliance validation and governance testing activities.
• Contribute to continuous improvement of quality and security testing processes.

Skills

QA experience

Security testing

Automation testing

API security

Python

pytest

Authz testing

Enterprise apps

Agile

AI testing

Tools

AWS

CloudWatch

Job description

Technology stack

• Python, pytest, AWS, REST APIs, JWT, OAuth, Cedar, CloudWatch, AI Agent Frameworks

Project overview

The project focuses on building and securing an enterprise AI platform that enables agent interactions, policy based authorization, workflow governance, and auditability. The platform incorporates advanced security controls, testing frameworks, and compliance mechanisms to ensure reliable and secure AI operations.

Team

Medium team (10-20 people)

Position overview

We are looking for a QA Engineer with Security Testing experience to support the validation and governance of enterprise AI platforms and agent based solutions. In this role, you will design and execute functional and security test strategies, validate policy enforcement mechanisms, and ensure compliance with security, auditability, and governance requirements across AI driven systems.

Responsibilities

• Design and execute functional and security testing strategies for AI platforms and agent based applications
• Develop and maintain automated security testing frameworks using Python and pytest
• Perform API security testing aligned with OWASP API security best practices
• Validate authorization and policy enforcement mechanisms across agent workflows
• Design and execute tests covering permit and deny logic, policy precedence, parameter level conditions, and enforcement controls
• Verify audit logging capabilities and ensure compliance with governance requirements
• Perform threat modeling and security assessments for AI and agent based systems
• Validate protections against AI specific attack scenarios, including prompt injection and identity spoofing
• Develop and maintain test documentation, test cases, and quality assurance standards
• Collaborate with engineering, architecture, and security teams to identify and resolve vulnerabilities
• Support compliance validation and governance testing activities
• Contribute to continuous improvement of quality and security testing processes

Requirements

• 3+ years of experience in quality assurance, security testing, or software testing
• Experience implementing automated security testing frameworks
• Experience with API security testing and OWASP API security principles
• Experience designing functional and security test cases and test strategies
• Strong Python programming skills with experience using pytest
• Knowledge of threat modeling methodologies and security testing practices
• Experience validating authentication, authorization, and policy enforcement controls
• Experience working with enterprise applications and distributed systems
• Strong analytical, troubleshooting, and documentation skills
• Experience collaborating within agile software development environments
• Experience testing AI applications, agent based platforms, or machine learning systems

Nice to have

• Experience with AWS security testing and cloud security validation
• Experience with Cedar policy testing tools and policy validation frameworks
• Experience with regulatory compliance testing, including GDPR and SOC 2 requirements
• Knowledge of audit, governance, and risk management frameworks
• Experience validating agent to agent communication and authorization controls
• Understanding of AI security risks, including prompt injection attacks and agent identity spoofing
• Experience with CloudWatch and security monitoring solutions
• Provide your feedback on BizChat
• Experience with multi agent communication security patterns
• Experience performing trust model assessments and gap analysis for agent ecosystems
• Experience with Cedar policy testing tools and policy validation frameworks
• Experience with AWS security testing and cloud security reviews
• Knowledge of AI security risks, including prompt injection, excessive agency, identity spoofing, and tool parameter exposure
• Experience with regulatory compliance validation and governance frameworks
• Understanding of enterprise audit, risk management, and security monitoring practices
• Experience working with large scale AI, cloud, or distributed platform environments

What We Offer

• Vacation days: Up to 26 business days per year.
• 10 illness/special days off per year (fully paid, no medical papers needed) for all contract types
• Health and life insurance (Luxmed)
• MyBenefit platform with Multisport option
• Internal psychological support service
• English language classes from the first working day
• Access to external learning platforms: O’Reilly, LinkedIn Learning, Udemy, and a wide catalog of diverse internal training
• Flexible workplace: work from the office, from home, or choose a hybrid option
• Tech Skills Mentoring Program
• Opportunities to develop as a public speaker, mentor, or technical interviewer
• Fully paid idle (bench) when not involved in a project
• Certification reimbursement (AWS, GCP, Microsoft, etc.)