Senior Security QA Engineer, Cloud
Generate a McCoy IQ challenge in 30 seconds.
See how candidates think and approach the work this role demands, before the phone screen. We'll build a video challenge from this posting, and you can edit or share it before it goes live.
Key details
Job Description
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
As a Senior Security QA Engineer, you will be part of an engineering team responsible for designing, developing, and delivering automated testing solutions for cloud security. The role combines QA automation, cloud security, API testing, compliance testing, and infrastructure automation.
You will be responsible for building robust automated test frameworks to validate cloud platforms, SaaS applications, Kubernetes environments, APIs, security controls, compliance signatures, and AI-driven security capabilities. You will work across AWS, Azure, GCP, and Oracle Cloud while ensuring product functionality, security, reliability, scalability, and compliance.
The role requires strong analytical and problem-solving skills, with an emphasis on automation-first testing, API validation, continuous testing, security testing, and AI-assisted quality engineering.
Responsibilities:
- Develop and maintain automated functional, API, regression, integration, security, and end-to-end test suites.
- Build automation using Python, Java, Bash/Shell, REST APIs, and automation frameworks.
- Validate cloud security configurations, compliance signatures, and security policies across multi-cloud environments.
- Automate testing for AWS, Azure, GCP, Kubernetes, containers, microservices, and IaC.
- Integrate automated tests into CI/CD pipelines using Jenkins, or similar tools.
- Leverage Generative AI and AI-assisted tools for test-case generation, code creation, test-data generation, log analysis, defect investigation, documentation, and productivity improvement.
- Perform security and compliance testing against CIS, NIST, PCI-DSS, DISA/STIG, CSA-CCM, and MITRE ATT&CK.
- Collaborate with development, security, DevOps, and product teams to improve quality, automation coverage, and release efficiency.
Additional Plus Competencies:
- Security Certifications like CEH, CISA, CISM, CISSP, ISC2-CCSP
- Cloud platform-based certifications like AWS/Azure/GCP Certified Developer/Solution Architect
- Exposure to Security benchmarks like the CIS, SCCM, DISA, and STIG
- Basic understanding of security standards/mandates like CSA-CCM, NIST, PCI-DSS, MITRE, etc.
