Security & Quality Assurance Engineer at Turaco

About the Role

• We are seeking a skilled Security Quality Assurance Engineer to join our team. The successful candidate will be responsible for ensuring that our software is secure and free from vulnerabilities. You will work closely with our Software Engineers and Product Manager to identify and mitigate security risks throughout the software development life cycle.

Key Roles & Responsibilities:

• Conduct security assessments and testing of software applications to identify vulnerabilities and potential security risks.
• Collaborate with development and Product teams to implement appropriate security measures and best practices throughout the software development life cycle.
• Develop and maintain software security standards, policies, and procedures.
• Ensure compliance with industry standards and regulations related to software security.
• Conduct security training and awareness programs across the organization.
• Analyze security incidents and provide recommendations for remediation and prevention.
• Work with third-party security experts to identify and remediate security risks.
• Participate in security audits and assessments.
• Continually review IT security.
• Review API documentation shared by potential partners prior to implementation.
• Develop and implement software testing strategies, plans, and procedures.
• Perform manual and automated testing to ensure the functionality and quality of software products.
• Analyze test results and identify areas for improvement.
• Collaborate with software developers to ensure that products meet security and quality standards.
• Document and communicate issues, defects, and solutions to stakeholders.
• Stay up-to-date with the latest software development, quality assurance, and security testing trends and technologies.

Key Qualifications & Your Profile:

• Bachelor's degree in Computer Science or related field.
• At least 3 years of experience in software security analysis and testing.
• Experience with software development life cycle (SDLC) methodologies and practices.
• Strong knowledge of software testing automation tools and methodologies
• Strong knowledge of industry-standard security frameworks such as OWASP, SANS, and NIST.
• Familiarity with security tools such as static and dynamic code analysis tools, vulnerability scanners, and penetration testing tools.
• Security certifications such as CISSP, CEH, CISM, or equivalent are a plus.
• Excellent communication and interpersonal skills.
• Ability to work independently and collaboratively as part of a team.