Security Test Engineer (QA Expert)
- Worldwide
A cutting-edge e-commerce company developing products for our own technological platform. Our creative, smart and dedicated teams pool their knowledge and experience to find the best solutions to meet project needs, while maintaining sustainable and long-lasting results. How? By making sure that our teams thrive and develop professionally. Strong advocates of hiring top talent and letting them do what they do best, we strive to create a workplace that allows for an open, collaborative and respectful culture.
If you are self-driven and strive to give your customers the best possible entertainment experience, then we want you on-board! Your role must be technically competent able to work for different development/product teams, the main objective of your role is to support the teams bringing all technical and process decisions regarding quality from security perspective with a defined and CISO-aligned strategy, you have to be constantly reviewing how the teams are working identifying tests to be implemented as soon as possible to review the security of our applications, keeping the focus on having a quality mindset in an agile environment.
QA expert is a QA engineer but also has strong knowledge in team strategy, you have to been working with POs, Devs, and QAs making sure the teams are implementing the proper security testing coverage in every step in the SDLC, QA expert has also to act as a mentor and participate actively in coaching.
Some of your main responsibilities will be:
- Work with multiple independent agile software development teams to ensure that the products meet user expectations and security standards previuousy defined by CISO.
- Be the expert, coach, and mentor that helps those teams take responsibility and formulate security control best practices.
- Implement processes and with the team, setting priorities, coaching.
- Help these teams to define secuirity metrics, how to classify findings/defects, identify problem areas, and improve team efficiency.
- Ensure teams have the right testing methods about security, code coverage with automated tests and reviews to decrease the number of defects.
- Work with product owners on how to define requirements that meet security standards.
- Evaluate new test security tools and new techniques for testing.
- Perform automated security scans on the applications
- Promote good practices about security through SDLC
- Supporting HR in the recruitment process as a technical reference.
- Bachelor or Master Degree in Computer Science, Engineering or other related.
- Significant experience of working in Software Development teams and using QA tools and methodologies.
- Experience with automated testing tools.
- Good knowledge of SQL and scripting.
- Exceptional knowledge of STLC and SDLC.
- Experience in security testing (web application, web services, vulneratbility scanning, penetration testing)
- Knowledge about Security standards like OWASP
- Ability to provide application security risk and vulnerabilitiy assessment of technologies used in our web applications
- Knowlege about Security Testing tools like VeraCode, Synopsys, Contrast IAST, Live http, Fortify, etc.
- Flexible to work with departments in different time-zones, can specify region
- Upper intermediate English level
- ISTQB Certification
We will give you the opportunity to be the best version of yourself, develop professionally and create strong working relationships working remote or on site. While offering a competitive salary, we also invest in our people's professional development and want to see you grow and love what you do. We are dedicated to listening to our team's needs and are constantly working on creating an environment in which you can feel at home.... If this sounds like the place for you, contact us now!