[Hiring] QA with Security Fix Validation Expertise @CI&T

Role Description

We are seeking a detail-driven QA to safeguard quality on a security remediation squad serving a large US mortgage lender. Remediation at volume is where regressions hide, and you will be the control that keeps throughput from costing the client stability — proving each fix works and nothing else broke.

• Validate remediation fixes by confirming the vulnerability no longer reproduces and intended behavior remains intact.
• Design and execute regression testing around each fix, focusing on the blast radius of dependency upgrades and configuration changes.
• Build and maintain automated regression coverage for the areas the squad touches most frequently.
• Define testable validation and closure criteria together with the developers so "fixed" is a verifiable statement.
• Produce validation evidence the client's risk program can attach to closure records.
• Execute testing across the client's AWS environments and verify deployment behaves consistently between them.
• Raise quality risk early when a fix's scope is broader than it first appears.
• Integrate automated tests into the client's CI/CD pipeline.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Experience as QA or quality engineering for web applications.
• Good English communication skills (reading, writing, and speaking) — direct collaboration with a US-based engineering team.
• Proven capability in both manual exploratory testing and test automation.
• Test automation experience with a modern framework such as Cypress, Playwright, or Selenium.
• API testing experience with Postman, REST-assured, or an equivalent tool.
• Strong regression testing discipline, including the ability to scope what a change could have broken rather than re-running everything.
• Comfort testing PHP web applications hosted on AWS, including the ability to read PHP well enough to understand what a fix changed.
• Experience integrating automated tests into CI/CD pipelines.

Requirements

• Security testing exposure — validating vulnerability fixes, OWASP-based test cases, and basic penetration testing concepts.
• Performance testing experience with JMeter or k6.
• SQL proficiency for data validation.
• Prior experience on a remediation or technical debt squad.
• Experience in mortgage or financial services.
• Experience working with international clients.

Benefits

• Health and dental insurance
• Meal and food allowance
• Childcare assistance
• Extended paternity leave
• Partnership with gyms and health and wellness professionals via Wellhub (Gympass) TotalPass
• Profit Sharing and Results Participation (PLR)
• Life insurance
• Continuous learning platform (CI&T University)
• Discount club
• Free online platform dedicated to physical, mental, and overall well-being
• Pregnancy and responsible parenting course
• Partnerships with online learning platforms
• Language learning platform
• And many more!