Platform Security QA Engineer

Key Responsibilities
1. Requirement Analysis and Design Understanding
o Collaborate with stakeholders to understand security feature requirements.
o Analyze design specifications from the development team to identify potential areas for testing.
2. Test Architecture and Planning
o Design and implement test architectures and strategies for platform security features.
o Develop detailed test plans to ensure thorough validation.
3. Automation and Integration
o Automate test cases and integrate them into the CI/CD pipeline.
o Maintain and enhance automation frameworks, tools, and utilities for testing and deployment.
4. Testing and Defect Management
o Conduct comprehensive testing of features, including functional, performance, scalability, reliability, usability, compatibility, fuzz testing, static and dynamic code analysis, and memory leak detection.
o Analyze test results, identify issues, and file detailed defect reports in the defect management system.
o Perform root cause analysis and follow up with the development team for timely resolution of defects.
5. Technical Communication and Stakeholder Interaction
o Collaborate with internal and external stakeholders, including customer-facing teams, to provide technical presentations and updates.
o Communicate test results, findings, and recommendations effectively through detailed reports and presentations.
6. Tools and Utilities Development
Develop or integrate new utilities and tools to improve security testing and automation

Key Skills and Qualifications
Technical Expertise
o Proficiency in cryptography, platform security architecture, and threat analysis.
o Hands-on experience with fuzzing tools, static and dynamic code analysis tools, and memory leak detectors.
o Strong programming skills in C and Python.
Experience
o Proven experience in designing and implementing test architectures and frameworks.
o Solid understanding of CI/CD environments and experience in integrating automated tests within them.
Analytical and Communication Skills
o Strong analytical skills to perform root cause analysis and evaluate security vulnerabilities.
o Excellent written and verbal communication skills to interact with stakeholders and present technical information effectively.
Other
o Familiarity with defect management tools (JIRA etc) and reporting processes.
o Ability to work collaboratively in cross-functional teams and adapt to a dynamic environment.
The following qualifications will be considered a plus:
Experience with secure coding practices and secure software development lifecycle (SDLC).
Familiarity with common security standards such as OWASP, ISO 27001, and NIST.
Background in platform or embedded systems security.