#getfedihired #job #remotework #aws #cybersecurity
I still have an open FTE position, 100% remote in the USA for a Security Quality Engineer position. Medical/dental/$1500 per year in continuing education, and $1k/year charitable matching for qualified nonprofits. We also continue to support DEI, and are 43% women. And I've got an extremely diverse team (with furs and trans furs on it). The company is based in California, and has an office in Austin, TX.
It's a SaaS product that's in AWS, so familiarity with AWS security, log aggregation tools, etc. are desirable.
Please Boost. DM me for details and a discussion - I can provide a link that will bypass filtering and get a Recruiter to reach out to you.
-----
Tasks:
Security Testing, Validation, and Red Team Involvement
Conduct comprehensive security assessments and validate the remediation of issues identified by the Security Engineer, ensuring thorough testing of vulnerabilities and security controls, including Intrusion Detection Systems (IDS).
Participate in red team activities to proactively identify security gaps, contributing insights to improve overall security measures and response capabilities.
Authors and audits test cases in Test Rail across product feature teams for relevant security coverage.
Works closely with SDET team to automate security-specific tests for inclusion in CI/CD pipeline where appropriate.
Audit and Compliance Support
Audit and refine test cases in TestRail, ensuring that security considerations are consistently applied and validated against compliance frameworks (ie, SOC 2, PCI-DSS).
Collaborate with the Platform Engineering/SRE team to ensure that security testing aligns with operational practices and compliance requirements.
Training and Security Best Practices for the QE Team
Develop, deliver, and maintain training documentation and presentations to educate the QE team on secure testing methodologies, promoting the integration of security practices into testing workflows.
Mentor QE team members to foster a security-focused culture, enhancing awareness of secure coding and testing principles.