Senior Security Test / QA Engineer
Primary stack
Nice to have's
Job description
About the Position
We are seeking a Senior Security Test / QA Engineer to join our team in Romania, focusing on security testing and automation for AI agents. The role involves building an Enterprise Agent Development Platform, a production-grade, cloud-native ecosystem that enables engineering teams to define, orchestrate, deploy and observe AI agents at scale. This initiative spans agent framework design, runtime architecture, marketplace integration, CI/CD automation, and enterprise-grade observability.
Responsibilities
- Design and execute functional, security, and performance test suites for runtime controls
- Conduct security testing including penetration testing and threat modeling
- Perform agentic AI threat modeling covering OWASP Top 10 for LLMs including prompt injection as policy bypass and agent identity spoofing
- Build Python test automation using pytest
- Validate A2A policy enforcement
- Verify audit log accuracy and completeness
- Own the functional policy test suite covering permit/deny correctness, forbid-overrides-permit, and parameter-level conditions
- Manage LOG_ONLY to ENFORCE mode switching validation
- Develop functional and security test design strategies
Requirements
- 3+ years of experience in quality assurance or security testing
- Background in automated security test suite implementation
- Expertise in API security testing (OWASP API Top 10)
- English proficiency at B2 level or higher
Nice to Have
- Background in AWS security testing
- Familiarity with Cedar policy test tooling
- Knowledge of regulatory compliance testing (GDPR, SOC 2)
About the Company
EPAM Systems is a global software engineering and product development company that partners with many of the world’s leading businesses to deliver innovative solutions. We are committed to providing our clients with the best talent and the most advanced technologies.
© EPAM. This job description was sourced from the employer's public career page. TheJob is not the employer — we index the posting and route candidates to the source. All content rights and hiring decisions belong to the employer.
EPAM helps organizations innovate their business processes and rethink the way they manage their businesses so they can remain competitive in this new digital age.