Senior Security & Test Engineer – A2A Gateway

About the role

We are looking for a Senior Security & Test Engineer to own the security, functional and performance test suites for our A2A gateway within an enterprise‑grade Agent Development Platform. The platform enables engineering teams to define, orchestrate, deploy and observe AI agents at scale on AWS AgentCore Runtime.

Key responsibilities

• Design, implement and maintain Python‑based security test automation frameworks for the A2A gateway.
• Validate Cedar policy enforcement correctness in both LOG_ONLY and ENFORCE modes.
• Conduct trust‑model gap analysis for non‑AgentCore A2A agents.
• Develop functional and security test strategies for agentic AI systems.
• Perform performance testing and benchmarking of cloud APIs using k6 and Locust.
• Apply agentic AI and LLM threat‑modeling practices, including OWASP Top 10 for LLMs.
• Evaluate A2A trust‑model components such as OAuth 2.0, signed Agent Cards, JWT validation and token‑scope enforcement.

Required profile

• 3+ years of experience in security engineering or quality assurance.
• Strong background in API security testing and performance benchmarking for cloud services.
• Experience designing security tests for AI/agent systems beyond traditional REST APIs.
• Knowledge of enforcement mechanisms and trust‑model concepts (OAuth 2.0, JWT, signed Agent Cards).
• English proficiency at B2 level or higher.

Required skills

• Python
• k6
• Locust
• AWS
• Cedar policy testing
• OAuth 2.0
• JWT validation
• API security testing
• Performance testing
• Agentic AI threat modeling
• LLM threat modeling (OWASP Top 10 for LLMs)