Security & Test Engineer (A2A)

Há 2 dias

portugal portugal CareerWallet Tempo integral
A single weak link in an agent-to-agent (A2A) gateway can compromise the integrity of an entire agentic AI platform. The Security & Test Engineer (A2A) role in Portugal is fully remote and sits at the intersection of security, functional validation and performance assurance for a production-grade ecosystem. The platform’s scale and complexity demand rigorous trust models and policy enforcement that keep pace with evolving threats. In this role, you decide how security and correctness are proven for every agent channel and policy mode. The person in this position shapes the standards that define trust and reliability across the platform.
ResponsibilitiesDesign and validate A2A trust models, including OAuth 2.0 with signed Agent Cards, JWT validation and token scope enforcement for agent channelsDevelop Python-based security test automationCreate and execute functional and security test plansConduct performance testing using k6 and LocustTest Cedar policy enforcement for permit/deny correctness, forbid-overrides-permit and LOG_ONLY versus ENFORCE modesPerform threat modelling for agentic AI and large language model (LLM) systems, including OWASP Top 10 for LLMs, excessive agency and tool parameter exfiltrationRequirementsThree-plus years of experience in security engineering or quality assuranceAPI security testing expertisePerformance benchmarking for cloud APIsSecurity test design for AI or agent systems (beyond REST APIs)Experience with enforcement mechanism design or implementationNice to haveKnowledge of multi-agent communication security patternsExperience with trust model gap analysis for non-AgentCore A2A agentsWe offerCompetitive compensation depending on experience and skillsVariety of projects within one companyBeing a part of a project following engineering excellence standardsIndividual career path and professional growth opportunitiesInternal events and communitiesFlexible work hours #J-18808-Ljbffr