Senior Security & Test Engineer

Quick Facts

Senior Security & Test Engineer focused on securing an A2A gateway within a cloud-native AI agent development platform.

Description

Own security, functional, and performance testing for the A2A gateway and validate Cedar policy enforcement. Conduct trust model gap analysis for non-AgentCore agents, execute test plans for agentic AI systems, and mitigate LLM/agent-specific security risks.

Responsibilities

• Own security, functional, and performance test suites for the A2A gateway
• Validate Cedar policy enforcement correctness across LOG_ONLY and ENFORCE modes
• Conduct trust model gap analysis for non-AgentCore A2A agents
• Design and execute functional and security test plans for agentic AI systems
• Validate authentication and authorization flows across agent communication channels
• Identify and mitigate security risks specific to agentic AI and LLM-based systems
• Collaborate with engineering teams to strengthen the platform’s overall security posture
• Report and track defects, vulnerabilities, and performance bottlenecks uncovered during testing

Requirements

• 5+ years of experience in security engineering or quality assurance
• Knowledge of the A2A trust model including OAuth 2.0 signed Agent Cards and JWT validation with token scope enforcement for agent channels
• Proficiency in Python for security test automation
• Skills in functional and security test design
• Performance testing experience using k6 and Locust, plus performance benchmarking for cloud APIs
• Expertise in Cedar policy testing (permit/deny correctness, forbid-overrides-permit logic, LOG_ONLY vs ENFORCE mode)
• Background in agentic AI/LLM threat modeling covering OWASP Top 10 for LLMs, excessive agency, and tool parameter exfiltration
• Expertise in API security testing
• Security test design background for AI/agent systems beyond REST APIs
• Experience in enforcement mechanism design or implementation

Benefits

• Stable pay
• Employee Stock Purchase Plan with a 15% discount
• Benefits package: health insurance, multisport, shopping vouchers
• Referral bonuses up to $2,000
• Certification (Anthropic, Gemini, GCP, Azure, AWS)
• English classes
• Career development programs, mentoring, thought leadership, soft skills and well-being programs
• Hybrid work model with remote opportunity within Poland
• Chance to work abroad for up to 60 days annually and business-driven relocation opportunities
• Office entertainment and relaxation zones, table tennis and football, free snacks and coffee
• Corporate, social and well-being events
• Contractor option available (B2B terms agreed individually)