Software Engineer in Test – Security Focus

Company Overview 

We are 10Pearls, an award-winning digital development company, helping businesses with product design, development, and technology acceleration. We have a culture of innovation, uniquely designed to help companies transform, digitalize and scale by levering digital technology. 

About the role

We are seeking a skilled Software Engineer in Test with a strong focus on application security and secure development practices. The ideal candidate will partner closely with our engineering and security teams to drive the validation of security-focused enhancements and ensure remediation efforts are implemented effectively. You will help harden our platform by designing and executing tests that uncover security weaknesses before they reach production. 

 Key Responsibilities: 

• Design, implement, and maintain automated test suites focused on security use cases and remediations. 
• Validate security-related code changes across web, mobile, and API layers. 
• Partner with security engineers and the security to test patches, mitigations, and enhancements. 
• Conduct integration and regression testing around security features and controls. 
• Contribute to secure SDLC processes by embedding security tests in CI/CD pipelines. 
• Analyze penetration test results and collaborate with teams to very remediation. 
• Develop/Identify tools and frameworks to assist with automated security validation 
• Provide detailed documentation and reports on test outcomes and risk mitigation. 
• Develop and execute security test cases and strategies. 
• Collaborate with developers to integrate security measures into the software development lifecycle. 
• Stay updated on the latest security threats, tools, and best practices. 
• Ensure compliance with security standards and regulations. 
• Have experience testing OAuth2, SAML, and JWT authentication techniques. 
• Develop a deep understanding of the application to effectively identify and contextualize security vulnerabilities. 
• OWASP Application Security Verification Standard (ASVS): Provide a structured approach to testing web application security controls. 

 Required Qualification: 

• Bachelor’s degree in computer science, cybersecurity, or a related field (or equivalent experience). 
• 2+ years of experience in application security testing or software QA with a security focus. 
• Strong understanding of OWASP Top 10 and common application vulnerabilities. 
• Experience with tools such as Burp Suite, OWASP ZAP, Postman, or similar. 
• Experience with monitoring and logging tools such as Splunk, NewRelic, DataDog etc. 
• Familiarity with scripting languages (e.g., Python, JavaScript, Bash) for automation. 
• Familiarity with penetration testing tools and methodologies. 
• Experience writing SQL queries for backend validation. 
• Strong analytical and problem-solving skills. 
• Ability to work independently and as part of Agile environments, specifically Scrum or Kanban, to support iterative development and testing. 

 Preferred Qualifications: 

• Experience with static/dynamic analysis tools and security scanning in CI/CD. 
• Certifications such as OSCP, CEH, GWAPT, or similar. 
• Experience with SAST/DAST tools (e.g., SonarQube, Fortify, Veracode, CodeScene). 
• Familiarity with cloud security (AWS, or Azure). 
• Experience with container security (Docker, Kubernetes). 

 Benefits we offer 

• Access to LinkedIn Learning, Udemy, Pluralsight. 
• Access to a virtual nutritionist
• Amazing people oriented organizational culture
• Working from anywhere
• Challenging projects using the latest technologies with clients from the US. 

If you are a self-motivated and driven individual who is passionate about delivering high-quality software solutions, we encourage you to apply for this exciting opportunity.