Intellias
Security Test Engineer (Python)
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Security Test Engineer
We are looking for a Security Test Engineer to validate the security, reliability, and correctness of authorization and policy enforcement systems used in AI agent platforms. The role combines security testing, automated test development, API security validation, and policy verification. The ideal candidate has strong experience in security-focused QA, test automation with Python, and modern application security practices.
Project Overview
Our customer is a multinational corporation with more than a century of history and offices in over 180 countries. Their most ambitious goal at the time is to introduce a range of Reduced-Risk Products (RRPs). The target audience is more than 1 billion consumers around the globe. IT platform hosts 700+ applications.
Requirements:
- Security testing (pen testing, threat modeling)
- Agentic AI threat modelling (OWASP Top 10 for LLMs: 'prompt injection as policy bypass, agent identity spoofing)
- Python test automation (pytest)
- A2A policy enforcement testing
- Audit log validation
- Functional policy test suite ownership (permit/deny correctness, forbid-overrides-permit, parameter-level conditions, LOG_ONLY → ENFORCE mode switching)
- Functional and security test design
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Will be a plus:
- AWS security testing experience
- Cedar policy test tooling
- Regulatory compliance testing (GDPR, SOC 2)
Responsibilities:
- Design and execute functional and security test strategies for policy-driven authorization systems.
- Develop and maintain automated security and policy validation test suites using Python and pytest.
- Validate permit/deny decisions, policy precedence rules, parameter-level access controls, and policy evaluation correctness.
- Test transitions between LOG_ONLY and ENFORCE policy modes and verify expected enforcement behavior.
- Perform API security testing based on OWASP API Top 10 recommendations.
- Conduct security assessments, penetration testing, and threat modeling exercises for platform services and AI agent workflows.
- Design and execute test scenarios covering agent identity spoofing, prompt injection, policy bypass attempts, and other agentic AI attack vectors.
- Validate audit logging, traceability, and security event generation for authorization decisions.
- Verify A2A policy enforcement mechanisms across agent interactions and distributed workflows.
- Collaborate with engineering and security teams to identify vulnerabilities and improve platform security posture.
- Maintain security test documentation, reports, and compliance evidence where required.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Experience:
- 4+ years quality assurance or security testing
- Automated security test suite implementation
- API security testing (OWASP API Top 10)
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location