Platform Security QA Engineer

Experience: 5 – 7 Yrs

Job Description:

Key Responsibilities

1. Requirement Analysis and Design Understanding

• Collaborate with stakeholders to understand security feature requirements.
• Analyze design specifications from the development team to identify potential areas for testing.
  2. Test Architecture and Planning
• Design and implement test architectures and strategies for platform security features.
• Develop detailed test plans to ensure thorough validation.
  3. Automation and Integration
• Automate test cases and integrate them into the CI/CD pipeline.
• Maintain and enhance automation frameworks, tools, and utilities for testing and deployment.
  4. Testing and Defect Management
• Conduct comprehensive testing of features, including functional, performance, scalability, reliability, usability, compatibility, fuzz testing, static and dynamic code analysis, and memory leak detection.
• Analyze test results, identify issues, and file detailed defect reports in the defect management system.
• Perform root cause analysis and follow up with the development team for timely resolution of defects.
  5. Technical Communication and Stakeholder Interaction
• Collaborate with internal and external stakeholders, including customer-facing teams, to provide technical presentations and updates.
• Communicate test results, findings, and recommendations effectively through detailed reports and presentations.
  6. Tools and Utilities Development
• Develop or integrate new utilities and tools to improve security testing and automation

  Key Skills and Qualifications
  • Technical Expertise

• Proficiency in cryptography, platform security architecture, and threat analysis.
• Hands-on experience with fuzzing tools, static and dynamic code analysis tools, and memory leak detectors.
• Strong programming skills in C and Python.
  • Experience
• Proven experience in designing and implementing test architectures and frameworks.
• Solid understanding of CI/CD environments and experience in integrating automated tests within them.
  • Analytical and Communication Skills
• Strong analytical skills to perform root cause analysis and evaluate security vulnerabilities.
• Excellent written and verbal communication skills to interact with stakeholders and present technical information effectively.
  • Other
• Familiarity with defect management tools (JIRA etc) and reporting processes.
• Ability to work collaboratively in cross-functional teams and adapt to a dynamic environment.
  The following qualifications will be considered a plus:
  • Experience with secure coding practices and secure software development lifecycle (SDLC).
  • Familiarity with common security standards such as OWASP, ISO 27001, and NIST.
  • Background in platform or embedded systems security.