Senior AI Agent Platform Security & Test Engineer

EPAM Systems; Poland; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid work mode

Relocation support

Health insurance

Employee stock purchase plan

English classes

Job summary

EPAM Systems is seeking a Senior Security & Test Engineer to help secure an Enterprise Agent Development Platform and its A2A gateway. You will own security and performance tests for agent communication, validate OAuth2/JWT flows and contribute to trust-model analysis.

The role emphasizes Cedar policy testing, API security and threat modeling for AI/LLM-based systems, with hybrid work options within Poland.

Qualifications

• 5+ years of experience in security engineering or quality assurance.
• Knowledge of the A2A trust model including OAuth 2.0 signed Agent Cards and JWT validation with token scope enforcement for agent channels.
• Proficiency in Python for security test automation.
• Skills in functional and security test design.
• Experience in performance testing using k6 and Locust along with performance benchmarking for cloud APIs.
• Expertise in Cedar policy testing including permit/deny correctness forbid-overrides-permit logic and LOG_ONLY vs ENFORCE mode.
• Background in agentic AI/LLM threat modeling covering OWASP Top 10 for LLMs excessive agency and tool parameter exfiltration.
• Expertise in API security testing.
• Background in security test design for AI/agent systems beyond REST APIs.
• Experience in enforcement mechanism design or implementation.

Responsibilities

• Own security, functional and performance test suites for the A2A gateway.
• Test Cedar policy enforcement correctness across LOG_ONLY and ENFORCE modes.
• Conduct trust model gap analysis for non-AgentCore A2A agents.
• Design and execute functional and security test plans for agentic AI systems.
• Validate authentication and authorization flows across agent communication channels.
• Identify and mitigate security risks specific to agentic AI and LLM-based systems.
• Collaborate with engineering teams to strengthen the platform's overall security posture.
• Report and track defects, vulnerabilities and performance bottlenecks uncovered during testing.

Skills

Security engineering

QA/testing

Python

API security

OAuth 2.0

JWT validation

Cedar policy testing

Threat modeling

LLM security

Enforcement design

Tools

k6

Locust

Job description

EPAM Systems is seeking a Senior Security & Test Engineer to help secure an Enterprise Agent Development Platform and its A2A gateway. You will own security and performance tests for agent communication, validate OAuth2/JWT flows and contribute to trust-model analysis.

The role emphasizes Cedar policy testing, API security and threat modeling for AI/LLM-based systems, with hybrid work options within Poland.