Senior Security & Test Engineer (A2A)

Responsibilities

• Own security, functional and performance test suites for the A2A gateway
• Test Cedar policy enforcement correctness across LOG_ONLY and ENFORCE modes
• Conduct trust model gap analysis for non-AgentCore A2A agents
• Validate A2A trust model components including OAuth 2.0, signed Agent Cards and JWT validation
• Enforce token scope requirements across agent communication channels
• Design functional and security test cases for the A2A platform
• Execute performance testing using k6 and Locust
• Verify Cedar policy logic including permit/deny correctness and forbid-overrides-permit rules
• Apply threat modeling practices for agentic AI and LLM systems based on OWASP Top 10 for LLMs
• Identify risks related to excessive agency and tool parameter exfiltration

Languages