Senior Security & Test Engineer

Quick Facts

• Role: Senior Security & Test Engineer

• Focus: Securing and testing the A2A gateway for an enterprise agent development platform

Description

You will own security, functional, and performance test suites for the A2A gateway, validating trust and policy enforcement across agent communication. The role includes Cedar policy correctness checks, authentication/authorization flow validation, threat modeling for agentic AI/LLM systems, and risk mitigation based on test results.

Responsibilities

• Own security, functional, and performance test suites for the A2A gateway

• Test Cedar policy enforcement correctness across LOG_ONLY and ENFORCE modes

• Conduct trust model gap analysis for non-AgentCore A2A agents

• Design and execute functional and security test plans for agentic AI systems

• Validate authentication and authorization flows across agent communication channels

• Identify and mitigate security risks specific to agentic AI and LLM-based systems

• Collaborate with engineering teams to strengthen the platform’s overall security posture

• Report and track defects, vulnerabilities, and performance bottlenecks found during testing

Requirements

• 5+ years of experience in security engineering or quality assurance

• Knowledge of the A2A trust model, including OAuth 2.0 signed Agent Cards and JWT validation with token scope enforcement

• Proficiency in Python for security test automation

• Skills in functional and security test design

• Performance testing experience with k6 and Locust and performance benchmarking for cloud APIs

• Expertise in Cedar policy testing: permit/deny correctness, forbid-overrides-permit logic, LOG_ONLY vs ENFORCE mode

• Background in agentic AI/LLM threat modeling (OWASP Top 10 for LLMs, excessive agency, tool parameter exfiltration)

• Expertise in API security testing

• Security test design for AI/agent systems beyond REST APIs

• Background in enforcement mechanism design or implementation

Benefits

• Stable pay

• Employee Stock Purchase Plan with a 15% discount

• Health insurance and multisport

• Shopping vouchers

• Referral bonuses up to $2,000

• English classes

• Career development programs, mentoring, soft skills, and well-being programs

• Certifications (Anthropic, Gemini, GCP, Azure, AWS)

• Hybrid by design with remote work within Poland and the option to work abroad up to 60 days annually

• Business-driven relocation opportunities

• Offices with entertainment/relaxation zones and free snacks/coffee