Senior Security & Test Engineer (A2A) (EPAM SISTEMOS, UAB)
Darbdavys: EPAM SISTEMOS, UAB
Miestas: Vilnius
Paskelbta: 2026-10-17
💶 3600 - 5500 €/mėn. Prieš mokesčius · visa darbo diena · nuotolinis darbas: hibridinis · paskelbta 2026-10-01
Kandidatuoti šaltinyje (cv.lt) →
Job description:
We are seeking a Senior Security & Test Engineer (A2A) to own the security, functional and performance test suites for our A2A gateway, focusing on Cedar policy enforcement and agentic AI threat modeling.
Feel free to work remotely from anywhere across Lithuania or connect with colleagues at our Vilnius and Kaunas offices.
Own security, functional and performance test suites for the A2A gateway
Test Cedar policy enforcement correctness across LOG_ONLY and ENFORCE modes
Conduct trust model gap analysis for non-AgentCore A2A agents
Validate A2A trust model components including OAuth 2.0, signed Agent Cards and JWT validation
Enforce token scope requirements across agent communication channels
Design functional and security test cases for the A2A platform
Execute performance testing using k6 and Locust
Verify Cedar policy logic including permit/deny correctness and forbid-overrides-permit rules
Apply threat modeling practices for agentic AI and LLM systems based on OWASP Top 10 for LLMs
Identify risks related to excessive agency and tool parameter exfiltration
Requirements:
3+ years of experience in security engineering or QA
Expertise in API security testing and performance benchmarking for cloud APIs
Skills in security test design for AI and agent systems beyond REST APIs
Background in enforcement mechanism design or implementation
Proficiency in Python for security test automation
Knowledge of A2A trust model components (OAuth 2.0, signed Agent Cards, JWT validation)
English proficiency at B2 level or higher
Nice to have
Familiarity with multi-agent communication security patterns
Understanding of trust model gap analysis for non-AgentCore A2A agents
Company offers:
Engineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years
Advanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies
World-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact
Professional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices
GenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys
Entrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life
Hybrid Setup: The flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas
Other Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more
We are seeking a Senior Security & Test Engineer (A2A) to own the security, functional and performance test suites for our A2A gateway, focusing on Cedar policy enforcement and agentic AI threat modeling.
Feel free to work remotely from anywhere across Lithuania or connect with colleagues at our Vilnius and Kaunas offices.
Own security, functional and performance test suites for the A2A gateway
Test Cedar policy enforcement correctness across LOG_ONLY and ENFORCE modes
Conduct trust model gap analysis for non-AgentCore A2A agents
Validate A2A trust model components including OAuth 2.0, signed Agent Cards and JWT validation
Enforce token scope requirements across agent communication channels
Design functional and security test cases for the A2A platform
Execute performance testing using k6 and Locust
Verify Cedar policy logic including permit/deny correctness and forbid-overrides-permit rules
Apply threat modeling practices for agentic AI and LLM systems based on OWASP Top 10 for LLMs
Identify risks related to excessive agency and tool parameter exfiltration
Requirements:
3+ years of experience in security engineering or QA
Expertise in API security testing and performance benchmarking for cloud APIs
Skills in security test design for AI and agent systems beyond REST APIs
Background in enforcement mechanism design or implementation
Proficiency in Python for security test automation
Knowledge of A2A trust model components (OAuth 2.0, signed Agent Cards, JWT validation)
English proficiency at B2 level or higher
Nice to have
Familiarity with multi-agent communication security patterns
Understanding of trust model gap analysis for non-AgentCore A2A agents
Company offers:
Engineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years
Advanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies
World-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact
Professional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices
GenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys
Entrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life
Hybrid Setup: The flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas
Other Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more