Logo for EPAM Systems

Security & Test Engineer (A2A)

EPAM Systems

Role overview

Summary

The Security & Test Engineer (A2A) role focuses on ensuring the integrity of an agentic AI platform by shaping trust models and policy enforcement. You will work remotely in Portugal, contributing to security, functional validation, and performance assurance within a complex production-grade ecosystem.

Qualifications

  • Three-plus years of experience in security engineering or quality assurance.
  • API security testing expertise.
  • Performance benchmarking for cloud APIs.
  • Security test design for AI or agent systems (beyond REST APIs).
  • Experience with enforcement mechanism design or implementation.

Responsibilities

  • Design and validate A2A trust models, including OAuth 2.0 with signed Agent Cards.
  • Develop Python-based security test automation.
  • Create and execute functional and security test plans.
  • Conduct performance testing using k6 and Locust.

Key facts

Hard skills

Other skills

  • Problem Solving
  • Analytical Thinking

About the company

EPAM Systems logo

EPAM Systems

  • IT Services & Consulting
  • XLarge
  • 10,001+
Since 1993, EPAM Systems, Inc. (NYSE: EPAM) has used its software engineering expertise to become a leading global provider of digital engineering, cloud and AI-enabled transformation services, and a leading business and experience consulting partner for global enterprises and ambitious startups. We address our clients’ transformation challenges by fusing EPAM Continuum’s integrated strategy, experience and technology consulting with our 30+ years of engineering execution to speed our clients’ time to market and drive greater value from their innovations and digital investments. We make GenAI real with our AI LLM orchestration, testing and engineering solutions, EPAM DIAL, EPAM EliteA™ and EPAM AI/RUN™, respectively. We deliver globally, but engage locally with our expert teams of consultants, architects, designers and engineers, making the future real for our clients, our partners and our people around the world. We believe the right solutions are the ones that improve people’s lives and fuel competitive advantage for our clients across diverse industries. Our thinking comes to life in the experiences, products and platforms we design and bring to market. Added to the S&P 500 and the Forbes Global 2000 in 2021 and recognized by Glassdoor and Newsweek as a Top 100 Best Workplace, our multidisciplinary teams serve customers across six continents. We are proud to be among the top 15 companies in Information Technology Services in the Fortune 1000 and to be recognized as a leader in the IDC MarketScapes for Worldwide Experience Build Services, Worldwide Experience Design Services and Worldwide Software Engineering Services. Learn more at www.epam.com.
See all jobs

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

A single weak link in an agent-to-agent (A2A) gateway can compromise the integrity of an entire agentic AI platform. The Security & Test Engineer (A2A) role in Portugal is fully remote and sits at the intersection of security, functional validation and performance assurance for a production-grade ecosystem. The platform’s scale and complexity demand rigorous trust models and policy enforcement that keep pace with evolving threats. In this role, you decide how security and correctness are proven for every agent channel and policy mode. The person in this position shapes the standards that define trust and reliability across the platform. Responsibilities Design and validate A2A trust models, including OAuth 2.0 with signed Agent Cards, JWT validation and token scope enforcement for agent channels Develop Python-based security test automation Create and execute functional and security test plans Conduct performance testing using k6 and Locust Test Cedar policy enforcement for permit/deny correctness, forbid-overrides-permit and LOG_ONLY versus ENFORCE modes Perform threat modelling for agentic AI and large language model (LLM) systems, including OWASP Top 10 for LLMs, excessive agency and tool parameter exfiltration Requirements Three-plus years of experience in security engineering or quality assurance API security testing expertise Performance benchmarking for cloud APIs Security test design for AI or agent systems (beyond REST APIs) Experience with enforcement mechanism design or implementation Nice to have Knowledge of multi-agent communication security patterns Experience with trust model gap analysis for non-AgentCore A2A agents

Related jobs

Logo for Pennylane

Senior Application Security Engineer

Pennylane · 7 days ago

Remote from Europe, European Union, EMEA, Portugal, Spain, United Kingdom, Germany, France, Italy · Full time

Logo for Intapp

Senior Data Security Engineer

Intapp · 9 days ago

Remote from Europe, European Union, EMEA, Portugal · Full time

Logo for Docker

Senior Supply Chain Security Engineer

Docker · 30+ days ago

Remote from United States, EMEA, Europe, European Union, North America, United Kingdom, Germany, Portugal, Italy, Canada, France, Spain · Full time

Logo for HumanIT Digital Consulting

Senior IT Security Engineer - [Portugal / Spain / Poland - Remote]

HumanIT Digital Consulting · 30+ days ago

Remote from Europe, European Union, EMEA, Poland, Portugal, Spain · Full time

Logo for David Kennedy Recruitment Ltd.

Security Engineer (AppSec / GRC / AI Security)

David Kennedy Recruitment Ltd. · 30+ days ago

Remote from Europe, Asia, European Union, Middle East, South Asia, East Asia, EMEA, APAC, Saudi Arabia, Cyprus, Qatar, Israel, Greece, Estonia, Hungary · Full time

See all Security Engineer jobs

Other jobs at EPAM Systems