We are seeking a Senior Security & Test Engineer (A2A) to own the security functional and performance test suites for our A2A gateway focusing on Cedar policy enforcement and agentic AI threat modeling. The role involves testing Cedar policy enforcement correctness across LOG_ONLY and ENFORCE modes conducting trust model gap analysis validating A2A trust model components enforcing token scope requirements designing functional and security test cases and executing performance testing. Additionally it requires applying threat modeling practices for agentic AI identifying risks related to excessive agency and tool parameter exfiltration and utilizing expertise in API security testing specifically for cloud APIs. This position demands strong proficiency in Python for automation as well as knowledge of OAuth 2.0 signed Agent Cards and JWT validation.
