Security QA Engineer

As a Security QA Engineer, you will play a crucial role in ensuring the security and compliance of software applications. Your main responsibilities will include: - Designing, developing, and maintaining automated and manual test cases with a focus on security. - Performing static and dynamic application security testing (SAST/DAST). - Identifying, documenting, and tracking security-related defects and collaborating with engineering teams for remediation. - Conducting threat modeling and risk assessments throughout the software development lifecycle. - Validating fixes and patches for known vulnerabilities. - Assisting in the integration of security testing tools (e.g., OWASP ZAP, Burp Suite, SonarQube) into CI/CD pipelines. - Staying updated with security best practices, industry trends, and vulnerability databases (e.g., CVE, NVD). - Collaborating with QA, DevSecOps, and security analysts to promote secure development practices. - Participating in code reviews and contributing to the development of secure coding practices. Qualifications: - Bachelor's degree in Computer Science, Information Security, or a related field. - 3+ years of experience in software QA, with a minimum of 12 years focused on security testing. - Knowledge of application security principles, common vulnerabilities (OWASP Top 10), and secure SDLC. - Experience with automated testing tools and frameworks (e.g., Selenium, JUnit, pytest). - Proficiency in scripting or programming languages such as Python, Java, or JavaScript. - Familiarity with CI/CD tools (e.g., Jenkins, GitLab CI) and DevOps practices. - Experience with penetration testing or security assessment. Additionally, the following qualifications are preferred: - Security certifications (e.g., OSCP, CEH, GWAPT, CISSP). - Experience with cloud security (AWS, Azure, GCP). - Knowledge of regulatory standards (e.g., GDPR, HIPAA, PCI-DSS). - Familiarity with container security (Docker, Kubernetes) and IaC security tools (e.g., Checkov, Terraform Sentinel). Please note that this job description is in reference to hirist.tech.,