Security & Test Engineer with A2A Security

Aether Biomedical; United States; Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Vacation days up to 26 days/year

Health and life insurance

Learning platforms access (O'Reilly, L

Job summary

Aether Biomedical is seeking a Security & Test Engineer to strengthen the quality, security, and governance of enterprise AI and agent-based systems. You will design and implement security testing strategies and validate trust models across agent communications.

The role integrates with security, architecture, and engineering teams to drive secure, reliable platform operations and governance compliance in a fast-paced, cross-functional environment.

Qualifications

• 3+ years in security engineering, QA, or software testing.
• Experience designing automated security testing frameworks.
• Experience with API security testing and secure API validation practices.
• Experience performing performance benchmarking and load testing for cloud services.
• Experience designing security testing approaches for AI systems or distributed architectures.
• Strong Python programming skills and pytest experience.
• Understanding of OAuth 2.0, JWT authentication, and access control concepts.

Responsibilities

• Design and execute functional and security testing strategies for AI and agent-based systems.
• Develop and maintain automated security testing frameworks using Python and pytest.
• Validate agent-to-agent trust models, including OAuth 2.0 and JWT checks.
• Perform API security testing following industry security practices.
• Design and execute policy enforcement tests and governance validation.
• Collaborate with security, architecture, and engineering teams to identify vulnerabilities and mitigation plans.
• Create security test plans, test cases, and automation suites.

Skills

Python

pytest

OAuth 2.0

JWT

Agent frameworks

Security testing

API security

Performance testing

Tools

Cedar

k6

Locust

AWS

REST APIs

Job description

Technology stack

Python, pytest, OAuth 2.0, JWT, Cedar, k6, Locust, AWS, REST APIs, Agent to Agent Communication Frameworks

Project overview

The project focuses on building a secure enterprise agent ecosystem that enables communication between AI agents, services, and applications. The platform incorporates authentication, authorization, policy enforcement, auditability, and governance controls to support trusted agent interactions and enterprise compliance requirements.

Team

Medium team (10-20 people)

You will work within a cross functional team of security engineers, QA specialists, AI engineers, platform developers, and architects. The team follows an iterative delivery model with a strong focus on security, quality, observability, performance, and continuous improvement.

Position overview

We are looking for a Security & Test Engineer to support the quality, security, and governance of enterprise AI and agent based systems. In this role, you will design and execute security and functional testing strategies, validate agent to agent trust models, assess policy enforcement mechanisms, and help ensure that AI platforms operate securely, reliably, and in accordance with enterprise standards.

Responsibilities

• Design and execute functional and security testing strategies for AI and agent based systems.
• Develop and maintain automated security testing frameworks using Python and pytest.
• Validate agent to agent trust models, including OAuth 2.0 authentication, JWT validation, signed agent identities, and token scope enforcement.
• Perform API security testing based on established industry security practices.
• Design and execute policy enforcement tests covering permit and deny logic, policy precedence, parameter level conditions, and enforcement modes.
• Perform performance benchmarking and load testing for cloud based APIs and agent communication channels using k6, Locust, or similar tools.Validate audit logging mechanisms and governance controls across distributed agent ecosystems.
• Conduct threat modeling exercises for AI and agent based platforms, including assessment of prompt injection risks, excessive agent permissions, and tool parameter exposure scenarios.
• Collaborate with security, architecture, and engineering teams to identify vulnerabilities and recommend mitigation strategies.
• Create and maintain security test plans, test cases, automation frameworks, and technical documentation.
• Support compliance, governance, and operational readiness initiatives.
• Contribute to continuous improvement of testing, security validation, and quality assurance processes.

Requirements

• 3+ years of experience in security engineering, quality assurance, or software testing.
• Experience designing and implementing automated security testing frameworks.
• Experience with API security testing and secure API validation practices.
• Experience performing performance benchmarking and load testing for cloud based services.
• Experience designing security testing approaches for AI systems, agent platforms, or distributed application architectures.
• Experience validating authentication, authorization, and policy enforcement mechanisms.
• Strong Python programming skills and experience with pytest.
• Understanding of OAuth 2.0, JWT based authentication, and access control concepts.
• Knowledge of threat modeling methodologies and security assessment techniques.
• Experience creating security test plans, test strategies, and automation solutions.
• Strong analytical, troubleshooting, and documentation skills.
• Experience working within agile software development environments.
• Nice to have
• Experience with multi agent communication security patterns.
• Experience performing trust model assessments and gap analysis for agent ecosystems.
• Experience with Cedar policy testing tools and policy validation frameworks.
• Experience with AWS security testing and cloud security reviews.
• Knowledge of AI security risks, including prompt injection, excessive agency, identity spoofing, and tool parameter exposure.
• Experience with regulatory compliance validation and governance frameworks.
• Understanding of enterprise audit, risk management, and security monitoring practices.
• Experience working with large scale AI, cloud, or distributed platform environments.

What We Offer

• Vacation days: Up to 26 business days per year.
• 10 illness/special days off per year (fully paid, no medical papers needed) for all contract types
• Health and life insurance (Luxmed)
• MyBenefit platform with Multisport option
• Internal psychological support service
• English language classes from the first working day
• Access to external learning platforms: O'Reilly, LinkedIn Learning, Udemy, and a wide catalog of diverse internal training
• Flexible workplace: work from the office, from home, or choose a hybrid option
• Tech Skills Mentoring Program
• Opportunities to develop as a public speaker, mentor, or technical interviewer
• Fully paid idle (bench) when not involved in a project
• Certification reimbursement (AWS, GCP, Microsoft, etc.)