Job Summary

As a Senior Test Lead specializing in Network Security, you will play a critical role in ensuring the integrity and performance of our software systems. Your primary responsibility will be to develop comprehensive testing plans that align with project objectives in collaboration with stakeholders. You will leverage your expertise to define testing scope, goals, and deliverables, contributing to the overall success of the organization by enhancing the quality and security of our technology solutions.

Key Responsibilities

1. Participate In Functional And Technical Discussions With Clients And Team Members To Understand Functional And Design Specifications, Highlighting Performance Concerns And Inconsistencies While Ensuring That The Appropriate Test Environments And Infrastructures Are Established And Maintained.
2. Identify Opportunities For Process Improvement In Testing Methodologies And Tools, Implementing Best Practices In Network Security Testing To Enhance Both Efficiency And Effectiveness Throughout The Testing Lifecycle.
3. Oversee The Creation And Execution Of Automated Test Scripts Utilizing Tools Such As Selenium And Jmeter, Ensuring Consistency With Industry Quality Standards While Minimizing Security Exposure And Vulnerabilities.
4. Develop And Mentor Qa Engineers In The Application Of The Testing Framework, Enhancing Their Skills In Network Security Testing Methodologies And Tools, Thereby Increasing Team Productivity And Technical Capabilities.

Skill Requirements

1. Strong Understanding Of Network Security Principles And Practices.
2. Proficiency In Automated Testing Tools And Frameworks Such As Selenium And Jmeter.
3. Good Knowledge Of Testing Methodologies, Particularly In Cloud Environments And Network Security.
4. Familiarity With Security Testing Techniques And Tools, Including Vulnerability Assessment And Penetration Testing.
5. Excellent Analytical And Problem-Solving Skills, With A Keen Attention To Detail.
6. Strong Communication And Collaboration Abilities To Work Effectively With Cross-Functional Teams.

Other Requirements

SAST/SCA/DAST scanning support

• Automated security scanning of ~17 external-facing applications.
• SAST (Static Application Security Testing) — scans source code for vulnerabilities
• SCA (Software Composition Analysis) — checks open-source/third-party libraries for known vulnerabilities
• DAST (Dynamic Application Security Testing) — tests running applications for exploitable weaknesses
• Planned to start early August, pending finalization of commercial/rate terms
• Includes not just initial scans but repeated rescans to confirm that any vulnerabilities found were actually fixed

2. Application penetration testing

• Manual/expert-led pen testing on the same 17 external-facing systems
• Phased timeline: walkthroughs and prep in Q4, actual testing execution in Q1 2027
• Rescans built in afterward specifically to validate that Critical/High severity findings were remediated