Position Summary :

We are seeking a highly motivated QA Engineer to join a dedicated Vulnerability Remediation POD focused on reducing Critical and High security vulnerabilities across enterprise applications. The QA Engineer will play a critical role in validating security remediations, ensuring application stability, and supporting rapid remediation timelines while maintaining quality standards.

The ideal candidate will have strong experience in functional testing, API testing, regression testing, test automation, and working within Agile development teams. Experience validating security-related changes and supporting enterprise applications is highly desirable.

Key Responsibilities :

Vulnerability Validation & Testing :

- Validate remediation of Critical and High security vulnerabilities across web, API, and backend applications.

- Create and execute focused test cases to verify vulnerability fixes without introducing regressions.

- Perform risk-based testing to support rapid remediation cycles and SLA adherence.

- Conduct smoke, functional, integration, and regression testing for security fixes.

- Validate package upgrades, framework upgrades, and configuration changes resulting from remediation efforts.

- Verify security scan findings have been successfully remediated and closed.

Quality Assurance & Automation :

- Develop and maintain automated test scripts to improve remediation testing efficiency.

- Leverage existing automation suites to accelerate validation cycles.

- Execute API, UI, and backend validation testing.

- Analyze test results, identify defects, and work closely with developers to resolve issues.

- Ensure remediation changes meet quality, performance, and reliability requirements.

Collaboration & Agile Delivery :

- Use AI first model for delivery.

- Partner with Developers, Security Engineers, Architects, Product Owners, and Application SMEs.

- Participate in sprint planning, backlog refinement, daily stand-ups, and retrospectives.

- Assist in remediation prioritization by identifying testing risks and dependencies.

- Support deployment validation and production readiness activities.

Governance & Compliance :

- Maintain test evidence and documentation for audit and compliance requirements.

- Track testing progress and provide status updates to POD leadership.

- Support vulnerability remediation reporting and governance activities.

- Ensure compliance with enterprise quality and security standards.

Required Technical Skills :

Primary QA Skills :

- Functional Testing

- Regression Testing

- Integration Testing

- API Testing

- Smoke Testing

- Test Planning & Execution

- Defect Management

Automation Skills :

- Selenium

- Cypress or Playwright (Preferred)

- Rest Assured / Postman

- TestNG / JUnit

- API Automation

- SQL Validation

Security Testing Knowledge :

- OWASP Top 10 awareness

- Security Validation Testing

- Authentication & Authorization Testing

- Vulnerability Remediation Validation

- Session Management & Access Control Testing

- Secure SDLC Concepts

Tools :

- Jira

- Confluence

- Postman

- Git / GitHub

- Azure DevOps

- Browser Developer Tools

- SonarQube (awareness)

- Snyk

- Claude Code

Required Experience :

- 5 - 8 years of QA experience in enterprise application testing.

- Experience testing web, API, and backend applications.

- Experience in Agile/Scrum delivery environments.

- Strong understanding of test design techniques and defect lifecycle management.

- Experience working with CI/CD pipelines and modern testing practices.

- Experience validating application changes resulting from framework upgrades and dependency updates.

Preferred Qualifications :

- ISTQB Certification.

- Experience supporting security remediation or compliance-driven initiatives.

- Experience with test automation frameworks.

- Experience in Financial Services, Insurance, or other regulated industries.

- Familiarity with cloud-based applications and microservices architectures.

- Experience using AI-assisted testing tools and automation accelerators.

Key Competencies :

- Strong analytical and problem-solving skills.

- Attention to detail and focus on quality.

- Ability to work effectively in fast-paced remediation cycles.

- Strong collaboration and communication skills.

- Ownership mindset with a focus on delivering measurable outcomes.

Success Measures :

- Validation of Critical vulnerabilities within 48-hour remediation timelines.

- Validation of High vulnerabilities within 7-day remediation timelines.

- Low defect leakage into production resulting from remediation changes.

- High test coverage for security remediation activities.

- Improved remediation throughput through automation and efficient testing practices.

- Timely delivery of audit-ready test evidence and compliance documentation.