Security & Test Engineer

About the Role:
You’ll be the team’s continuous adversarial tester — not a final security review bolted on before launch, but an active role testing every safety-critical piece of the system as it’s built, throughout the entire 9-week build. Your written sign-off is the gate that has to be cleared before our AI agent is ever allowed to touch real financial data.

Responsibilities:

• Design and run adversarial test scenarios against each safety-critical component as it lands, not held until the end of the project.
• Attempt self-approval exploits against the authorization service and approval backend.
• Attempt access-control-bypass exploits against the document retrieval system.
• Attempt duplicate-submission and stale-session attacks against the SAP connector and tool execution gateway.
• Attempt bounds-bypass exploits against the agent configuration/template system.
• Produce a written, dated sign-off before any real (non-sandbox) financial write action is allowed to go live.

Requirements:

• 5+ years of experience in distributed-systems reliability (circuit breakers, idempotent retries) combined with genuine security testing instincts.
• Comfortable working continuously alongside a fast-moving engineering team, not just at the end of a project.
• Strong written communication — your sign-off decisions need to be clear and defensible.

Nice to Have:

• Experience with adversarial/red-team testing of systems that gate real financial or consequential actions.
• Experience testing authorization, approval-workflow, or audit-logging systems specifically.

Work Location: In person