Security & Test Engineer (A2A)

We are looking for a Security & Test Engineer to validate the security, reliability, and trustworthiness of agent-to-agent communication platforms. The role combines security testing, performance validation, policy verification, and AI threat modeling for multi-agent systems. The ideal candidate has hands-on experience in security engineering, automated testing, API security, and modern AI/agent security frameworks.

Our client is a global corporation with over 100 years of history and operations in 180+ countries. Intellias supports the client in building a comprehensive software ecosystem for an innovative IoT product, with a focus on eCommerce, Digital Marketing, and IoT solutions.

The engineering teams work on core platform components that help accelerate software delivery, standardize best practices, and support compliance across a large-scale IT landscape of 700+ applications.

As an Engineer, you will join the Core Architecture Team and contribute to the architecture and implementation of the Digital Engineering Enterprise Platform.

Requirements:

• A2A trust model (OAuth 2.0 + signed Agent Cards, JWT validation, token scope enforcement for agent channels)

• Python security test automation

• Functional and security test design

• Performance testing (k6, Locust)

• Cedar policy testing (permit/deny correctness, forbid-overrides-permit, LOG_ONLY vs ENFORCE mode)

• Agentic AI / LLM threat modelling (OWASP Top 10 for LLMs, excessive agency, tool parameter exfiltration)

Experience:

• 4+ years security engineering or QA

• API security testing

• Performance benchmarking for cloud APIs

• Security test design for AI/agent systems (not just REST APIs)

• Enforcement mechanism design or implementation

Will be a plus:

• Multi-agent communication security patterns

• Trust model gap analysis for non-AgentCore A2A agents

Responsibilities:

• Design and execute security, functional, API, performance, and load testing for A2A communication platforms.
• Validate A2A trust and authorization models, including OAuth 2.0, JWT, signed Agent Cards, token scopes, Cedar policies, and LOG_ONLY / ENFORCE behavior.
• Develop automated security test suites using Python and tools such as k6 or Locust.
• Cover AI-specific security risks, including prompt injection, excessive agency, tool misuse, and parameter exfiltration.
• Perform security reviews, threat modeling, and validation of policy enforcement, auditability, and trust boundaries between agents.
• Collaborate with platform, backend, and security teams to identify vulnerabilities, improve resilience, and provide clear security reports, risk assessments, and mitigation recommendations.