Senior Security & Test Engineer – A2A Gateway

About the role

We are looking for a Senior Security & Test Engineer to own the security, functional, and performance test suites for our A2A gateway within an enterprise‑grade Agent Development Platform. This cloud‑native ecosystem enables teams to define, orchestrate, deploy, and monitor AI agents at scale using LangGraph and Strands Agents on AWS AgentCore Runtime.

Key responsibilities

• Design, implement and maintain security, functional and performance test suites for the A2A gateway.
• Validate Cedar policy enforcement correctness in LOG_ONLY and ENFORCE modes.
• Conduct trust‑model gap analysis for non‑AgentCore A2A agents.
• Develop Python‑based security test automation frameworks.
• Perform API performance testing and benchmarking using k6 and Locust.
• Apply agentic AI and LLM threat‑modeling practices to identify risks such as excessive agency and tool‑parameter exfiltration.
• Evaluate trust‑model components including OAuth 2.0, signed Agent Cards, JWT validation and token‑scope enforcement.

Required profile

• 3+ years of experience in security engineering or QA.
• Strong background in API security testing and performance benchmarking for cloud APIs.
• Experience with enforcement mechanism design or implementation.
• Knowledge of A2A trust‑model concepts (OAuth 2.0, JWT, signed Agent Cards).

Required skills

• Python
• k6
• Locust
• AWS
• Cedar policy testing
• OAuth 2.0
• JWT validation
• API security testing
• Performance testing tools
• Agentic AI and LLM threat‑modeling (OWASP Top 10 for LLMs)