Senior Security & Test Engineer – A2A Gateway

About the role

We are seeking a Senior Security & Test Engineer to own and evolve the security, functional, and performance test suites for our A2A gateway. The role is fully remote within Georgia and supports a cloud‑native platform that orchestrates AI agents at scale.

Key responsibilities

• Maintain and expand security, functional, and performance test suites for the A2A gateway.
• Validate Cedar policy enforcement in LOG_ONLY and ENFORCE modes.
• Conduct trust‑model gap analysis for non‑AgentCore A2A agents.
• Design and execute functional and security test strategies for agentic AI systems.
• Build Python‑based security test automation frameworks.
• Perform API performance testing and benchmarking using k6 and Locust.
• Apply AI/LLM threat‑modeling practices to identify risks such as excessive agency and tool‑parameter exfiltration.
• Evaluate OAuth 2.0, signed Agent Cards, JWT validation, and token‑scope enforcement.

Required profile

• 3+ years of experience in security engineering or QA.
• Strong background in API security testing and performance benchmarking for cloud APIs.
• Experience designing security tests for AI/agent systems beyond traditional REST APIs.
• Proficiency in Python and familiarity with Cedar policy testing.
• Excellent written and spoken English (B2+ level).

Required skills

• Python
• k6
• Locust
• Cedar policy testing
• OAuth 2.0
• JWT validation
• API security testing
• Performance testing
• Agentic AI and LLM threat‑modeling
• OWASP Top 10 for LLMs

What we offer

• Remote work from anywhere in Georgia.
• Opportunity to work abroad up to two months per year.
• Access to corporate events, leadership development, and career advising.
• Dynamic, innovative environment with global impact.