Senior Security & Test Software Engineer (EPAM SISTEMOS, UAB)
Darbdavys: EPAM SISTEMOS, UAB
Miestas: Kaunas
Paskelbta: 2026-10-23
💶 3600 - 5500 €/mėn. Prieš mokesčius · visa darbo diena · nuotolinis darbas: hibridinis · paskelbta 2026-10-01
Kandidatuoti šaltinyje (cv.lt) →
Job description:
We are looking for a Senior Security & Test Software Engineer to join our team building an Enterprise Agent Development Platform — a production-grade, cloud-native ecosystem that enables engineering teams to define, orchestrate, deploy and observe AI agents at scale. The platform standardizes agent development across the organization using LangGraph and Strands Agents on AWS AgentCore Runtime, providing a single-file developer experience where the platform handles runtime, tooling, observability and deployment automatically. In this role, you will own security, functional and performance testing for the A2A gateway and help enforce consistent security, quality and governance standards across the platform.
This position offers hybrid setup with the flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas.
Own security, functional and performance test suites for the A2A gateway
Test Cedar policy enforcement correctness across LOG_ONLY and ENFORCE modes
Conduct trust model gap analysis for non-AgentCore A2A agents
Design and automate security and functional test suites using Python
Perform performance testing and benchmarking of cloud APIs using k6 and Locust
Validate Cedar policy correctness including permit/deny logic and forbid-overrides-permit behavior
Apply agentic AI and LLM threat modeling practices to identify risks such as excessive agency and tool parameter exfiltration
Enforce OAuth 2.0 and JWT validation mechanisms for agent channel token scope
Partner with engineering teams to embed consistent security and quality standards across the Agent Development Platform
Requirements:
3+ years of experience in security engineering or QA
Expertise in API security testing and performance benchmarking for cloud APIs
Background in security test design for AI and agent systems beyond REST APIs
Skills in enforcement mechanism design or implementation
Knowledge of A2A trust model including OAuth 2.0, signed Agent Cards, JWT validation and token scope enforcement for agent channels
Proficiency in Python for security test automation
Competency in functional and security test design
Familiarity with performance testing tools such as k6 and Locust
Understanding of Cedar policy testing including permit/deny correctness, forbid-overrides-permit and LOG_ONLY vs ENFORCE mode
Knowledge of agentic AI / LLM threat modeling including OWASP Top 10 for LLMs, excessive agency and tool parameter exfiltration
Nice to have
Familiarity with multi-agent communication security patterns
Background in trust model gap analysis for non-AgentCore A2A agents
Company offers:
Engineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years
Advanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies
World-Class Clients: Work closely with 340+…
We are looking for a Senior Security & Test Software Engineer to join our team building an Enterprise Agent Development Platform — a production-grade, cloud-native ecosystem that enables engineering teams to define, orchestrate, deploy and observe AI agents at scale. The platform standardizes agent development across the organization using LangGraph and Strands Agents on AWS AgentCore Runtime, providing a single-file developer experience where the platform handles runtime, tooling, observability and deployment automatically. In this role, you will own security, functional and performance testing for the A2A gateway and help enforce consistent security, quality and governance standards across the platform.
This position offers hybrid setup with the flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas.
Own security, functional and performance test suites for the A2A gateway
Test Cedar policy enforcement correctness across LOG_ONLY and ENFORCE modes
Conduct trust model gap analysis for non-AgentCore A2A agents
Design and automate security and functional test suites using Python
Perform performance testing and benchmarking of cloud APIs using k6 and Locust
Validate Cedar policy correctness including permit/deny logic and forbid-overrides-permit behavior
Apply agentic AI and LLM threat modeling practices to identify risks such as excessive agency and tool parameter exfiltration
Enforce OAuth 2.0 and JWT validation mechanisms for agent channel token scope
Partner with engineering teams to embed consistent security and quality standards across the Agent Development Platform
Requirements:
3+ years of experience in security engineering or QA
Expertise in API security testing and performance benchmarking for cloud APIs
Background in security test design for AI and agent systems beyond REST APIs
Skills in enforcement mechanism design or implementation
Knowledge of A2A trust model including OAuth 2.0, signed Agent Cards, JWT validation and token scope enforcement for agent channels
Proficiency in Python for security test automation
Competency in functional and security test design
Familiarity with performance testing tools such as k6 and Locust
Understanding of Cedar policy testing including permit/deny correctness, forbid-overrides-permit and LOG_ONLY vs ENFORCE mode
Knowledge of agentic AI / LLM threat modeling including OWASP Top 10 for LLMs, excessive agency and tool parameter exfiltration
Nice to have
Familiarity with multi-agent communication security patterns
Background in trust model gap analysis for non-AgentCore A2A agents
Company offers:
Engineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years
Advanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies
World-Class Clients: Work closely with 340+…