Security Quality Engineer

The Security Quality Engineer will be vital in integrating security within our Quality Engineering processes with a focus on vulnerability management compliance and secure testing practices in support of our Practice Management and Fintech platform. This role will work closely with the Security Engineer to remediate vulnerabilities and ensure that security best practices are embedded in testing strategies. Additionally the Security Quality Engineer will audit test cases in TestRail participate in red team exercises and collaborate with the Platform Engineering/SRE team to enhance the security posture of the infrastructure through effective testing and monitoring practices in support of our practice management platform.

What You'll Do:

• Security Testing Validation and Red Team Involvement

  • Conduct comprehensive security assessments and validate the remediation of issues identified by the Security Engineer ensuring thorough testing of vulnerabilities and security controls including Intrusion Detection Systems (IDS).

  • Participate in red team activities to proactively identify security gaps contributing insights to improve overall security measures and response capabilities.

  • Authors and audits test cases in Test Rail across product feature teams for relevant security coverage.

  • Works closely with SDET team to automate security-specific tests for inclusion in CI/CD pipeline where appropriate.

• Audit and Compliance Support

  • Audit and refine test cases in TestRail ensuring that security considerations are consistently applied and validated against compliance frameworks (ie SOC 2 PCI-DSS).

  • Collaborate with the Platform Engineering/SRE team to ensure that security testing aligns with operational practices and compliance requirements.

• Training and Security Best Practices for the QE Team

  • Develop deliver and maintain training documentation and presentations to educate the QE team on secure testing methodologies promoting the integration of security practices into testing workflows.

  • Mentor QE team members to foster a security-focused culture enhancing awareness of secure coding and testing principles.

About You:

• Bachelor’s degree in Information Security Computer Science or related field or equivalent work experience.

• 3+ years of experience in security testing within a quality engineering environment

• Familiarity with Test Rail Tricentis QTest or other Test Management Tools.

• Proficiency in scripting preferably in Python.

• Understanding of standard security testing tools and frameworks (ie OWASP NIST).

• Experience with PCI DSS and related compliance standards

• Strong understanding of TCP/IP Networking Intrusion Detection Systems firewalls etc.

• Understanding of Cryptography and how it pertains to data security

• Experience working within an Agile environment

Soft Skills:

• Excellent communication skills for effectively conveying security concepts to the QE team and other stakeholders.

• Detail-oriented with strong analytical capabilities to maintain audit-compliant documentation and secure testing practices.

Additional Information

The annual salary range for this position is $120000 to $150000 per year. The salary range for performing this role outside of the US / Austin / California may differ.  AffiniPay is committed to offering competitive fair and commensurate compensation and has provided an estimated pay range for this role. Actual compensation may vary based on job-related knowledge skills experience and education.