Senior Security & Test Engineer

Epam Systems — Latvia · Posted ~1 week ago

Senior Full-time Remote

Skills

Security testing Functional testing Performance testing Cedar policy enforcement OAuth 2.0 JWT validation Threat modeling OWASP Top 10 for LLMs k6 Locust Cedar JWT

🔓 Log in to save this job, tailor your resume & track your apply process — 7 days free, no card needed.

Log in to add to target list

Summary ✨ AI‑Generated

A senior security and testing specialist is sought to own comprehensive security, functional, and performance test suites for an agent-to-agent communication platform. The role focuses on policy enforcement, trust-model validation, OAuth 2.0, signed identity metadata, JWT validation, token scopes, performance testing with modern load-testing tools, and threat modeling for agentic AI and LLM systems.

Highlights

Remote work is available from anywhere in Latvia, with an option to collaborate from an office. The role offers ownership of security and performance testing, exposure to agentic AI security, and work with modern identity, authorization, and threat-modeling technologies.

Description

We are seeking a Senior Security & Test Engineer (A2A) to own the security, functional and performance test suites for our A2A gateway, focusing on Cedar policy enforcement and agentic AI threat modeling. Feel free to work remotely from anywhere across Latvia or connect with colleagues at our Riga office. Responsibilities Own security, functional and performance test suites for the A2A gatewayTest Cedar policy enforcement correctness across LOG_ONLY and ENFORCE modesConduct trust model gap analysis for non-AgentCore A2A agentsValidate A2A trust model components including OAuth 2.0, signed Agent Cards and JWT validationEnforce token scope requirements across agent communication channelsDesign functional and security test cases for the A2A platformExecute performance testing using k6 and LocustVerify Cedar policy logic including permit/deny correctness and forbid-overrides-permit rulesApply threat modeling practices for agentic AI and LLM systems based on OWASP Top 10 for LLMsIdentify risks related to excessive agency and tool parameter exfiltration Requirements 3+ years of experience in security engineering or QAExpertise in API security testing and performance benchmarking for cloud APIsSkills in security test design for AI and agent systems beyond REST APIsBackground in enforcement mechanism design or implementationProficiency in Python for security test automationKnowledge of A2A trust model components (OAuth 2.0, signed Agent Cards, JWT validation)English proficiency at B2 level or higher Nice to have Familiarity with multi-agent communication security patternsUnderstanding of trust model gap analysis for non-AgentCore A2A agents We offer Engineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years.Advanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies.World-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact.Professional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices.GenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys.Entrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life.Hybrid Setup: The flexibility to work from any location in Latvia, whether it's your home or our office in Riga.Other Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more. Salary range €3.2K-€5K gross, based on your experience and interview results. EPAM is a leading global provider of digital platform engineering and development services. For over 30 years, our team has helped leading brands navigate the waves of digital transformation, building solutions that help them stay competitive through constant market disruption.With offices in 55+ countries, EPAM has grown in Latvia to over 150+ talented innovators in 4 years. We foster creativity and unconventional ways of doing things, welcoming like-minded professionals to join us.