Senior Security Test / QA Engineer

EPAM is a leading global provider of digital platform engineering and development services. We are committed to having a positive impact on our customers, our employees, and our communities. We embrace a dynamic and inclusive culture. Here you will collaborate with multi-national teams, contribute to a myriad of innovative projects that deliver the most creative and cutting-edge solutions, and have an opportunity to continuously learn and grow. No matter where you are located, you will join a dedicated, creative, and diverse community that will help you discover your fullest potential.

We are looking for a Senior Security Test / QA Engineer to join our team building an Enterprise Agent Development Platform — a production-grade, cloud-native ecosystem that enables engineering teams to define, orchestrate, deploy and observe AI agents at scale. The platform standardizes agent development across the organization using LangGraph and Strands Agents on AWS AgentCore Runtime, providing a single-file developer experience where the platform handles runtime, tooling, observability and deployment automatically. The initiative spans agent framework design, runtime architecture, marketplace integration, CI/CD automation and enterprise-grade observability — reducing agent development from months to days while enforcing consistent security, quality and governance standards.

Responsibilities

• Design and execute functional, security and performance test suites for runtime controls
• Conduct security testing including penetration testing and threat modeling
• Perform agentic AI threat modeling covering OWASP Top 10 for LLMs including prompt injection as policy bypass and agent identity spoofing
• Build Python test automation using pytest
• Validate A2A policy enforcement
• Verify audit log accuracy and completeness
• Own the functional policy test suite covering permit/deny correctness, forbid-overrides-permit and parameter-level conditions
• Manage LOG_ONLY to ENFORCE mode switching validation
• Develop functional and security test design strategies

Requirements

• 3+ years of experience in quality assurance or security testing
• Background in automated security test suite implementation
• Expertise in API security testing (OWASP API Top 10)
• English proficiency at B2 level or higher

Nice to have

• Background in AWS security testing
• Familiarity with Cedar policy test tooling
• Knowledge of regulatory compliance testing (GDPR, SOC 2)

We offer

• Full access to cutting-edge tools and technologies
• Competitive compensation depending on experience and skills
• All-around Social package: professional & soft skills training, medical & family care programs, sports
• Free English classes
• Unlimited access to LinkedIn learning solutions
• Continuous experience exchange with experts and professionals worldwide
• Friendly team and comfortable working environment
• Engineering, corporate, and social events within and outside the Company
• Flexible working schedule
• Opportunities for self-realization