Security & Test Engineer (AI Agent Systems)

Quick Facts

• Role: Security & Test Engineer (AI Agent Systems)
• Focus: Security quality, governance, and testing for enterprise AI/agent ecosystems

Description

You will design and execute functional and security testing strategies for AI and agent-based systems. The role includes validating agent-to-agent trust models using OAuth 2.0, JWT validation, signed agent identities, and token scope enforcement, as well as testing policy enforcement and governance controls. You will also perform API security testing, threat modeling, and performance/load benchmarking for cloud APIs and agent communication channels.

Responsibilities

• Design and execute functional and security testing strategies for AI and agent-based systems
• Develop and maintain automated security testing frameworks using Python and pytest
• Validate agent-to-agent trust models (OAuth 2.0, JWT validation, signed agent identities, token scope enforcement)
• Perform API security testing based on established industry practices
• Test policy enforcement logic covering permit/deny, precedence, parameter-level conditions, and enforcement modes
• Perform performance benchmarking and load testing for cloud APIs and agent communication channels (k6, Locust, or similar tools)
• Validate audit logging mechanisms and governance controls across distributed agent ecosystems
• Conduct threat modeling (prompt injection risks, excessive agent permissions, tool parameter exposure)
• Collaborate with security, architecture, and engineering teams to identify vulnerabilities and recommend mitigations
• Create and maintain security test plans, test cases, automation frameworks, and technical documentation
• Support compliance, governance, and operational readiness initiatives
• Contribute to continuous improvement of testing, security validation, and QA processes

Requirements

• 3+ years of experience in security engineering, quality assurance, or software testing
• Experience designing and implementing automated security testing frameworks
• Experience with API security testing and secure API validation practices
• Experience performing performance benchmarking and load testing for cloud-based services
• Experience designing security testing approaches for AI systems, agent platforms, or distributed application architectures
• Experience validating authentication, authorization, and policy enforcement mechanisms
• Strong Python programming skills and experience with pytest
• Understanding of OAuth 2.0, JWT-based authentication, and access control concepts
• Knowledge of threat modeling methodologies and security assessment techniques
• Experience creating security test plans, test strategies, and automation solutions
• Strong analytical, troubleshooting, and documentation skills
• Experience working within agile software development environments

Benefits

• Up to 26 business vacation days per year
• 10 illness/special fully paid days off per year (no medical papers needed)
• Health and life insurance (Luxmed)
• MyBenefit platform with Multisport option
• Internal psychological support service
• English language classes from the first working day
• Access to external learning platforms (O’Reilly, LinkedIn Learning, Udemy) and a wide catalog of internal training
• Flexible workplace: work from the office, from home, or choose a hybrid option
• Tech Skills Mentoring Program
• Opportunities to develop as a public speaker, mentor, or technical interviewer
• Fully paid idle (bench) when not involved in a project
• Certification reimbursement (AWS, GCP, Microsoft, etc.)