Security Test Engineer (Python)

About the Position

We are looking for a Security Test Engineer to validate the security, reliability, and correctness of authorization and policy enforcement systems used in AI agent platforms. The role combines security testing, automated test development, API security validation, and policy verification. The ideal candidate has strong experience in security-focused QA, test automation with Python, and modern application security practices.

Responsibilities

• Design and execute functional and security test strategies for policy-driven authorization systems.
• Develop and maintain automated security and policy validation test suites using Python and pytest.
• Validate permit/deny decisions, policy precedence rules, parameter-level access controls, and policy evaluation correctness.
• Test transitions between LOG_ONLY and ENFORCE policy modes and verify expected enforcement behavior.
• Perform API security testing based on OWASP API Top 10 recommendations.
• Conduct security assessments, penetration testing, and threat modeling exercises for platform services and AI agent workflows.
• Design and execute test scenarios covering agent identity spoofing, prompt injection, policy bypass attempts, and other agentic AI attack vectors.
• Validate audit logging, traceability, and security event generation for authorization decisions.
• Verify A2A policy enforcement mechanisms across agent interactions and distributed workflows.
• Collaborate with engineering and security teams to identify vulnerabilities and improve platform security posture.
• Maintain security test documentation, reports, and compliance evidence where required.

Requirements

• Security testing (pen testing, threat modeling)
• Agentic AI threat modeling (OWASP Top 10 for LLMs: ‘prompt injection as policy bypass, agent identity spoofing)
• Python test automation (pytest)
• A2A policy enforcement testing
• Audit log validation
• Functional policy test suite ownership (permit/deny correctness, forbid-overrides-permit, parameter-level conditions, LOG_ONLY → ENFORCE mode switching)
• Functional and security test design

Experience:

• 4+ years quality assurance or security testing
• Automated security test suite implementation
• API security testing (OWASP API Top 10)

Will be a plus:

• AWS security testing experience
• Cedar policy test tooling
• Regulatory compliance testing (GDPR, SOC 2)

What it’s like to work at Intellias

At Intellias, where technology takes center stage, people always come before processes. By creating a comfortable atmosphere in our team, we empower individuals to unlock their true potential and achieve extraordinary results. That’s why we offer a range of benefits that support your well-being and charge your professional growth.

We are committed to fostering equity, diversity, and inclusion as an equal opportunity employer. All applicants will be considered for employment without discrimination based on race, color, religion, age, gender, nationality, disability, sexual orientation, gender identity or expression, veteran status, or any other characteristic protected by applicable law.

We welcome and celebrate the uniqueness of every individual. Join Intellias for a career where your perspectives and contributions are vital to our shared success.