Senior Security & Test Engineer (A2A)

We are seeking a Senior Security & Test Engineer (A2A) to own the security, functional and performance test suites for our A2A gateway, focusing on Cedar policy enforcement and agentic AI threat modeling.

Feel free to work remotely from anywhere across Latvia or connect with colleagues at our Riga office. Responsibilities

• Own security, functional and performance test suites for the A2A gateway
• Test Cedar policy enforcement correctness across LOG_ONLY and ENFORCE modes
• Conduct trust model gap analysis for non-AgentCore A2A agents
• Validate A2A trust model components including OAuth 2.0, signed Agent Cards and JWT validation
• Enforce token scope requirements across agent communication channels
• Design functional and security test cases for the A2A platform
• Execute performance testing using k6 and Locust
• Verify Cedar policy logic including permit/deny correctness and forbid-overrides-permit rules
• Apply threat modeling practices for agentic AI and LLM systems based on OWASP Top 10 for LLMs
• Identify risks related to excessive agency and tool parameter exfiltration

Requirements

• 3+ years of experience in security engineering or QA
• Expertise in API security testing and performance benchmarking for cloud APIs
• Skills in security test design for AI and agent systems beyond REST APIs
• Background in enforcement mechanism design or implementation
• Proficiency in Python for security test automation
• Knowledge of A2A trust model components (OAuth 2.0, signed Agent Cards, JWT validation)
• English proficiency at B2 level or higher

Nice to have

• Familiarity with multi-agent communication security patterns
• Understanding of trust model gap analysis for non-AgentCore A2A agents

We offer

• Engineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years.
• Advanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies.
• World-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact.
• Professional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices.
• GenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys.
• Entrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life.
• Hybrid Setup: The flexibility to work from any location in Latvia, whether it's your home or our office in Riga.
• Other Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more.

Salary range €3.2K-€5K gross, based on your experience and interview results. EPAM is a leading global provider of digital platform engineering and development services. For over 30 years, our team has helped leading brands navigate the waves of digital transformation, building solutions that help them stay competitive through constant market disruption.With offices in 55+ countries, EPAM has grown in Latvia to over 150+ talented innovators in 4 years. We foster creativity and unconventional ways of doing things, welcoming like-minded professionals to join us.