Senior Security Test / QA Engineer

We are looking for a Senior Security Test / QA Engineer to join our team building an Enterprise Agent Development Platform — a production-grade, cloud-native ecosystem that enables engineering teams to define, orchestrate, deploy and observe AI agents at scale. The platform standardizes agent development across the organization using LangGraph and Strands Agents on AWS AgentCore Runtime, providing a single-file developer experience where the platform handles runtime, tooling, observability and deployment automatically. The initiative spans agent framework design, runtime architecture, marketplace integration, CI/CD automation and enterprise-grade observability — reducing agent development from months to days while enforcing consistent security, quality and governance standards.

Responsibilities

• Design and execute functional, security and performance test suites for runtime controls
• Conduct security testing including penetration testing and threat modeling
• Perform agentic AI threat modeling covering OWASP Top 10 for LLMs including prompt injection as policy bypass and agent identity spoofing
• Build Python test automation using pytest
• Validate A2A policy enforcement
• Verify audit log accuracy and completeness
• Own the functional policy test suite covering permit/deny correctness, forbid-overrides-permit and parameter-level conditions
• Manage LOG_ONLY to ENFORCE mode switching validation
• Develop functional and security test design strategies

Requirements

• 3+ years of experience in quality assurance or security testing
• Background in automated security test suite implementation
• Expertise in API security testing (OWASP API Top 10)
• English proficiency at B2 level or higher

Nice to have

• Background in AWS security testing
• Familiarity with Cedar policy test tooling
• Knowledge of regulatory compliance testing (GDPR, SOC 2)