Senior Security & Test Engineer (A2A)
Primary stack
Nice to have's
Job description
About the Position
We are seeking a Senior Security & Test Engineer (A2A) to own the security, functional and performance test suites for our A2A gateway, focusing on Cedar policy enforcement and agentic AI threat modeling.
Responsibilities
- Own security, functional and performance test suites for the A2A gateway
- Test Cedar policy enforcement correctness across LOG_ONLY and ENFORCE modes
- Conduct trust model gap analysis for non-AgentCore A2A agents
- Validate A2A trust model components including OAuth 2.0, signed Agent Cards and JWT validation
- Enforce token scope requirements across agent communication channels
- Design functional and security test cases for the A2A platform
- Execute performance testing using k6 and Locust
- Verify Cedar policy logic including permit/deny correctness and forbid-overrides-permit rules
- Apply threat modeling practices for agentic AI and LLM systems based on OWASP Top 10 for LLMs
- Identify risks related to excessive agency and tool parameter exfiltration
Requirements
- 3+ years of experience in security engineering or QA
- Expertise in API security testing and performance benchmarking for cloud APIs
- Skills in security test design for AI and agent systems beyond REST APIs
- Background in enforcement mechanism design or implementation
- Proficiency in Python for security test automation
- Knowledge of A2A trust model components (OAuth 2.0, signed Agent Cards, JWT validation)
- English proficiency at B2 level or higher
Nice to Have
- Familiarity with multi-agent communication security patterns
- Understanding of trust model gap analysis for non-AgentCore A2A agents
About the Company
EPAM Systems is a global software engineering and product development company that partners with many of the world's leading organizations to deliver innovative technology solutions.
© EPAM. This job description was sourced from the employer's public career page. TheJob is not the employer — we index the posting and route candidates to the source. All content rights and hiring decisions belong to the employer.
EPAM helps organizations innovate their business processes and rethink the way they manage their businesses so they can remain competitive in this new digital age.