Logo for EPAM Systems

Senior Security & Test Engineer (A2A)

Role overview

Qualifications

  • 3+ years of experience in security engineering or QA
  • Expertise in API security testing and performance benchmarking for cloud APIs
  • Skills in security test design for AI and agent systems beyond REST APIs
  • Proficiency in Python for security test automation

Responsibilities

  • Own security, functional and performance test suites for the A2A gateway
  • Test Cedar policy enforcement correctness across LOG_ONLY and ENFORCE modes
  • Conduct trust model gap analysis for non-AgentCore A2A agents
  • Validate A2A trust model components including OAuth 2.0, signed Agent Cards and JWT validation

Key facts

Hard skills

About the company

EPAM Systems logo

EPAM Systems

  • IT Services & Consulting
  • XLarge
  • 10,001+
Since 1993, EPAM Systems, Inc. (NYSE: EPAM) has used its software engineering expertise to become a leading global provider of digital engineering, cloud and AI-enabled transformation services, and a leading business and experience consulting partner for global enterprises and ambitious startups. We address our clients’ transformation challenges by fusing EPAM Continuum’s integrated strategy, experience and technology consulting with our 30+ years of engineering execution to speed our clients’ time to market and drive greater value from their innovations and digital investments. We make GenAI real with our AI LLM orchestration, testing and engineering solutions, EPAM DIAL, EPAM EliteA™ and EPAM AI/RUN™, respectively. We deliver globally, but engage locally with our expert teams of consultants, architects, designers and engineers, making the future real for our clients, our partners and our people around the world. We believe the right solutions are the ones that improve people’s lives and fuel competitive advantage for our clients across diverse industries. Our thinking comes to life in the experiences, products and platforms we design and bring to market. Added to the S&P 500 and the Forbes Global 2000 in 2021 and recognized by Glassdoor and Newsweek as a Top 100 Best Workplace, our multidisciplinary teams serve customers across six continents. We are proud to be among the top 15 companies in Information Technology Services in the Fortune 1000 and to be recognized as a leader in the IDC MarketScapes for Worldwide Experience Build Services, Worldwide Experience Design Services and Worldwide Software Engineering Services. Learn more at www.epam.com.

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

We are seeking a Senior Security & Test Engineer (A2A) to own the security, functional and performance test suites for our A2A gateway, focusing on Cedar policy enforcement and agentic AI threat modeling. Responsibilities Own security, functional and performance test suites for the A2A gateway Test Cedar policy enforcement correctness across LOG_ONLY and ENFORCE modes Conduct trust model gap analysis for non-AgentCore A2A agents Validate A2A trust model components including OAuth 2.0, signed Agent Cards and JWT validation Enforce token scope requirements across agent communication channels Design functional and security test cases for the A2A platform Execute performance testing using k6 and Locust Verify Cedar policy logic including permit/deny correctness and forbid-overrides-permit rules Apply threat modeling practices for agentic AI and LLM systems based on OWASP Top 10 for LLMs Identify risks related to excessive agency and tool parameter exfiltration Requirements 3+ years of experience in security engineering or QA Expertise in API security testing and performance benchmarking for cloud APIs Skills in security test design for AI and agent systems beyond REST APIs Background in enforcement mechanism design or implementation Proficiency in Python for security test automation Knowledge of A2A trust model components (OAuth 2.0, signed Agent Cards, JWT validation) English proficiency at B2 level or higher Nice to have Familiarity with multi-agent communication security patterns Understanding of trust model gap analysis for non-AgentCore A2A agents

Related jobs

See all Security Engineer jobs

Other jobs at EPAM Systems