Senior Security & Test Engineer, A2A

🌍 УдалённоSeniorПолная занятостьАутсорс

Зарплата не указана

Есть о чём спросить

Вилки нет, про деньги придётся договариваться с нуля.

Нажмите на сигнал, чтобы увидеть, на чём он основан

Чем предстоит заниматься

Own security, functional, and performance test suites for the A2A gateway

Validate Cedar policy enforcement correctness across LOG_ONLY and ENFORCE modes

Conduct trust model gap analysis for non-AgentCore A2A agents

Design and execute functional and security test strategies for agentic AI systems

Build and maintain Python-based security test automation frameworks

Perform performance testing and benchmarking for cloud APIs using k6 and Locust

Test permit/deny correctness and forbid-overrides-permit logic within Cedar policies

Evaluate A2A trust model components, including OAuth 2.0, signed Agent Cards, JWT validation, and token scope enforcement for agent channels

Наши требования

3+ years of experience in security engineering or QA

Expertise in API security testing and performance benchmarking for cloud APIs

Skills in security test design for AI/agent systems beyond traditional REST APIs

Background in enforcement mechanism design or implementation

Knowledge of A2A trust model concepts, including OAuth 2.0, signed Agent Cards, JWT validation, and token scope enforcement

Proficiency in Python security test automation, functional test design, and performance testing tools such as k6 and Locust

Understanding of Cedar policy testing, including permit/deny correctness and LOG_ONLY vs ENFORCE modes

Familiarity with agentic AI and LLM threat modeling frameworks, including OWASP Top 10 for LLMs

Excellent command of written and spoken English (B2+ level)

Familiarity with multi-agent communication security patterns

Expertise in trust model gap analysis for non-AgentCore A2A agents

Дополнительно

We are looking for a Senior Security & Test Engineer

To take ownership of the security, functional, and performance test suites for our A2A gateway within an enterprise-grade Agent Development Platform. This production-ready, cloud-native ecosystem empowers engineering teams to define, orchestrate, deploy, and monitor AI agents at scale, standardizing agent development through LangGraph and Strands Agents on AWS AgentCore Runtime

This position centers on verifying Cedar policy enforcement accuracy and performing trust model gap analysis for non-AgentCore A2A agents, ensuring uniform security, quality, and governance standards throughout the platform