QA Engineer (AWS + FedRAMP)

Role Summary

We are looking for a QA Engineer to validate a predictive cybersecurity platform across backend APIs, frontend dashboards, simulation logic, deterministic bundle generation, isolated validation, security workflows, cloud integrations, audit trails, and operator-facing workflows.

Key Responsibilities

Prepare and execute functional, API, integration, regression, end-to-end, negative, and security-focused test cases

Validate telemetry ingestion, normalization, graph modeling, snapshot creation, traversal logic, and canonical serialization

Test adversarial trajectory simulations across lateral movement, privilege escalation, identity compromise, routing manipulation, service dependency disruption, botnet behavior, malware evasion, and insider threat scenarios

Verify deterministic outputs by testing repeated runs, reordered inputs, conflict resolution, canonical serialization, cryptographic hash generation, and signed artifact consistency

Validate operational invariant checks including privilege boundaries, network segmentation, route exposure, service dependency integrity, and inspection viability

Test isolated validation workflows, rollback readiness, audit evidence, authorization artifacts, and operator approval flows

Validate dashboard screens, charts, status banners, filters, JSON views, reports, alerts, and workflow states

Perform API testing, schema validation, test data management, CI/CD smoke testing, log validation, and access control testing

Required Skills

Strong experience in manual QA, API testing, regression testing, integration testing, and enterprise web application validation

Experience with tools such as Postman, Swagger/OpenAPI, JIRA, TestRail, SQL clients, browser dev tools, and log analysis

Understanding of deterministic testing, edge-case testing, transactional workflows, audit trails, and data consistency

Automation experience with Playwright, Cypress, Selenium, PyTest, or Postman/Newman is preferred

Familiarity with cloud-hosted applications, IAM/RBAC, authentication, logs, monitoring, and security controls

Basic cybersecurity knowledge around IAM, network segmentation, telemetry, control-plane configuration, SIEM/SOAR, and validation workflows is preferred