Senior Security & Test Engineer (A2A)

Quick Facts

• Role: Senior Security & Test Engineer (A2A)

• Focus: Securing and testing the A2A gateway for an enterprise agent development platform

Description

Own security, functional, and performance test suites for the A2A gateway, validating Cedar policy enforcement and secure authentication/authorization across agent communication channels. Conduct trust model gap analysis, design and execute functional and security test plans for agentic AI systems, and mitigate agentic AI/LLM-specific security risks. Collaborate with engineering to strengthen the platform’s overall security posture and track defects, vulnerabilities, and performance bottlenecks.

Responsibilities

• Own security, functional, and performance test suites for the A2A gateway

• Test Cedar policy enforcement correctness across LOG_ONLY and ENFORCE modes

• Perform trust model gap analysis for non-AgentCore A2A agents

• Design and execute functional and security test plans for agentic AI systems

• Validate authentication and authorization flows across agent communication channels

• Identify and mitigate security risks specific to agentic AI and LLM-based systems

• Report and track defects, vulnerabilities, and performance bottlenecks discovered during testing

Requirements

• 5+ years of experience in security engineering or quality assurance

• Knowledge of the A2A trust model, including OAuth 2.0 signed Agent Cards and JWT validation with token scope enforcement

• Proficiency in Python for security test automation

• Skills in functional and security test design

• Performance testing experience using k6 and Locust plus performance benchmarking for cloud APIs

• Expertise in Cedar policy testing (permit/deny correctness, forbid-overrides-permit logic, LOG_ONLY vs ENFORCE mode)

• Background in agentic AI/LLM threat modeling including OWASP Top 10 for LLMs and risks like excessive agency and tool/parameter exfiltration

• Expertise in API security testing

• Background in security test design for AI/agent systems beyond REST APIs

• Background in enforcement mechanism design or implementation

Benefits

• Stable pay

• Employee Stock Purchase Plan (15% discount)

• Health insurance and multisport benefits; shopping vouchers

• Referral bonuses up to $2,000

• Hybrid-by-design work model with opportunity to work remotely within Poland

• Chance to work abroad for up to 60 days annually

• Business-driven relocation opportunities

• Career development programs, mentoring, and soft skills & well-being programs

• Certifications (Anthropic, Gemini, GCP, Azure, AWS)

• English classes

• Office amenities and social/well-being events