QA Analyst - Remote

Job Description

The QA Analyst II plays a critical role in ensuring the delivery of secure, high-performing, and reliable software applications across diverse platforms, including Salesforce, React, C#, Ruby on Rails, and React Native. This position is responsible for executing comprehensive testing strategies to validate functionality, performance, and security while identifying vulnerabilities and ensuring compliance with industry best practices and regulatory standards. By collaborating with cross-functional teams, maintaining robust documentation, and implementing process improvements, the QA Analyst II contributes to the continuous enhancement of application quality and user satisfaction.

Essential Functions and Basic Duties

Assumes responsibility for testing and quality assurance

• Design, develop, and execute comprehensive test plans, test cases, and test scripts for applications built with Salesforce, React, C#, Ruby on Rails, and React Native.
• Perform functional, regression, integration, performance, and security testing across all platforms.
• Test mobile apps developed with React Native and Ruby on Rails, ensuring performance, usability, security, and reliability across iOS and Android platforms.
• Validate API interactions and data flows between systems, including Salesforce, Ruby on Rails, and React Native applications.
• Perform database validation and testing using Microsoft SQL Server, including writing and executing SQL queries.

Assumes responsibility for security testing

• Conduct security testing to identify vulnerabilities in web, mobile, and API integrations using tools like OWASP ZAP, Burp Suite, or similar.
• Perform penetration testing to assess application resilience to attacks.
• Validate adherence to security best practices, such as OWASP Top 10 and Secure Software Development Lifecycle (SSDLC).
• Collaborate with the development team to remediate security vulnerabilities and verify fixes.
• Ensure data protection and security compliance standards, such as GDPR, CCPA, or HIPAA (if applicable), are met.

Assumes responsibility for collaboration and documentation

• Document and track defects, security vulnerabilities, and testing progress using Jira (or similar tools).
• Provide detailed test results, quality metrics, and security assessment reports to stakeholders.
• Work closely with development, product, and business teams to ensure secure and reliable application delivery.

Assumes responsibility for process improvement

• Maintain and enhance automated testing frameworks, including security test automation.
• Identify areas for improvement in testing and security strategies and implement industry best practices.
• Participate in code reviews and contribute to secure coding practices.

Assumes responsibility for establishing and maintaining effective working relationships with team members

• Attends meetings as required (both virtually and/or in-person as required). Examples include mandatory internal meetings as needed and required, as often as monthly or quarterly, in-person meetings with clients, conferences, events, seminars, etc.
• Conducts job duties in accordance with the Corporate Values and Culture: Others First (Put others before self), Wisdom (Do the wise thing), and Growth (Keep getting better).

Testing & Quality Assurance

• Test Case Coverage: Maintain at least 95% test coverage for functional, integration, regression, and security tests.
• Defect Detection Rate: Identify and report at least 90% of critical and high-severity defects before the production release.
• Defect Leakage Rate: Ensure defect leakage to production is less than 5% for major releases.
• Regression Testing Efficiency: Complete 100% of planned regression test cases within the sprint cycle.
• Mobile Testing Accuracy: Ensure at least 95% compatibility across supported iOS and Android devices for React Native applications.

Security Testing

• Security Vulnerability Detection Rate: Identify and report 100% of critical security vulnerabilities before production deployment.
• Security Compliance Adherence: Ensure applications meet 100% compliance with OWASP Top 10, SSDLC, and relevant data protection regulations (e.g., GDPR, CCPA, HIPAA if applicable).
• Penetration Testing Effectiveness: Detect 90% of exploitable security flaws through penetration testing.
• Security Remediation Efficiency: Ensure 100% of identified critical security vulnerabilities are remediated before release.

Collaboration & Documentation

• Defect Resolution Collaboration: Maintain a 95% developer-QA alignment rate, ensuring defects are properly documented, assigned, and resolved within SLA timelines.
• Jira Ticket Closure Rate: Ensure 90% of test-related tickets are closed within the sprint cycle.
• Stakeholder Communication: Provide 100% of required test results, security assessment reports, and quality metrics within agreed timelines.
• Code Review Participation: Actively contribute to at least 80% of scheduled code reviews, ensuring best security and quality practices are followed.

Process Improvement & Automation

• Test Automation Coverage: Increase automated test coverage by at least 10% per quarter, focusing on regression and security tests.
• CI/CD Testing Integration: Ensure 100% of automated test cases run successfully in the CI/CD pipeline with tools like Jenkins, GitHub Actions, or Azure DevOps.
• Process Optimization Impact: Implement at least 2 process improvements per quarter to enhance test efficiency and security best practices.
• Performance Testing Completion: Ensure 100% of required load and performance tests are executed before major releases.

Personal Development & Continuous Learning

• Certifications & Training: Complete at least one relevant certification or training annually in Salesforce, security testing, or test automation.
• Industry Best Practices: Stay updated on security trends and QA methodologies, sharing at least one key insight or best practice per quarter with the team.

Qualifications

Education/Certification

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.

Eligibility Requirements

• All candidates must be able to fulfill E-verify requirements.

Required Knowledge

• Proficient in manual and automated testing methodologies.
• Experience with test automation tools like Selenium, Appium, or similar frameworks.
• Strong understanding of REST and SOAP APIs, with experience using tools like Postman for API and security testing.
• Proficiency in writing SQL queries and validating data in Microsoft SQL Server.
• Familiarity with security tools such as OWASP ZAP, Burp Suite, or Nessus.
• Knowledge of Salesforce testing tools and secure Salesforce configurations.
• Experience with CI/CD pipelines and tools like Jenkins, GitHub Actions, or Azure DevOps.

Experience Required

• 3+ years of experience in software quality assurance, including testing web, mobile, and Salesforce-based applications.
• Experience testing mobile applications developed with React Native and backend systems using Ruby on Rails.
• Familiarity with security testing tools and methodologies.
• Hands-on experience testing web applications built using React and C#.

Skills/Abilities

• Exceptional analytical and problem-solving abilities.
• Strong communication and collaboration skills.
• Detail-oriented with a proactive approach to quality and security assurance.