QA Engineer (AWS + FedRAMP)

Role Summary
We are looking for a QA Engineer to validate a predictive cybersecurity platform across backend APIs, frontend dashboards, simulation logic, deterministic bundle generation, isolated validation, security workflows, cloud integrations, audit trails, and operator-facing workflows.

Key Responsibilities
Prepare and execute functional, API, integration, regression, end-to-end, negative, and security-focused test cases
Validate telemetry ingestion, normalization, graph modeling, snapshot creation, traversal logic, and canonical serialization
Test adversarial trajectory simulations across lateral movement, privilege escalation, identity compromise, routing manipulation, service dependency disruption, botnet behavior, malware evasion, and insider threat scenarios
Verify deterministic outputs by testing repeated runs, reordered inputs, conflict resolution, canonical serialization, cryptographic hash generation, and signed artifact consistency
Validate operational invariant checks including privilege boundaries, network segmentation, route exposure, service dependency integrity, and inspection viability
Test isolated validation workflows, rollback readiness, audit evidence, authorization artifacts, and operator approval flows
Validate dashboard screens, charts, status banners, filters, JSON views, reports, alerts, and workflow states
Perform API testing, schema validation, test data management, CI/CD smoke testing, log validation, and access control testing

Required Skills
Strong experience in manual QA, API testing, regression testing, integration testing, and enterprise web application validation
Experience with tools such as Postman, Swagger/OpenAPI, JIRA, TestRail, SQL clients, browser dev tools, and log analysis
Understanding of deterministic testing, edge-case testing, transactional workflows, audit trails, and data consistency
Automation experience with Playwright, Cypress, Selenium, PyTest, or Postman/Newman is preferred
Familiarity with cloud-hosted applications, IAM/RBAC, authentication, logs, monitoring, and security controls
Basic cybersecurity knowledge around IAM, network segmentation, telemetry, control-plane configuration, SIEM/SOAR, and validation workflows is preferred