QA Engineer – Security, Compliance & Automation

Codvo Private Limited; Hyderabad; On-site; INR 800,000 - 1,200,000; Full time

Job summary

A tech-focused company in Hyderabad is looking for a QA Engineer specializing in security, compliance, and automation testing. The ideal candidate will have over 5 years of experience in test automation and be proficient in frameworks like C#, .NET, and Selenium. This position requires strong analytical skills and familiarity with compliance frameworks. Join a multidisciplinary team ensuring industrial applications are secure and resilient.

Qualifications

• 5+ years of experience in QA or Test Automation for enterprise applications.
• Strong knowledge of C#, .NET, Angular or Java-based testing frameworks.
• Experience with Selenium, Playwright, Postman, JMeter or Robot Framework.

Responsibilities

• Design and implement automated test frameworks for secure SDLC validation.
• Conduct compliance-driven testing aligned with EU CRA, NIS2, and ISO 27001.
• Build and maintain security and compliance test suites in CI/CD pipelines.

Skills

C#

.NET

Angular

Java-based testing frameworks

Selenium

Playwright

Postman

JMeter

Robot Framework

SAST/SCA tools

Compliance frameworks

Analytical skills

Debugging skills

Documentation skills

Education

Bachelor’s or Master’s degree in Computer Science

Tools

SonarQube

Snyk

Checkmarx

Docker

Kubernetes

Job description

QA Engineer – Security, Compliance & Automation

Reports To: QA Lead / CRA Practice Lead

Experience Level: 5–8 years

About Us

At Codvo, we are committed to building scalable, future-ready data platforms that power business impact. We believe in a culture of innovation, collaboration, and growth, where engineers can experiment, learn, and thrive. Join us to be part of a team that solves complex data challenges with creativity and cutting-edge technology.

About the Role

We are looking for a QA Engineer specializing in security, compliance, and automation testing to join our Cyber Resilience practice. You will work closely with software, infrastructure, and security teams to design and execute test strategies ensuring CRA, SOC2, and ISO 27001 compliance across diverse software stacks (web, cloud, edge, and embedded).

This role is ideal for engineers passionate about secure software validation, compliance automation, and end-to-end testing of resilient systems.

Key Responsibilities

• Design and implement automated test frameworks for secure SDLC validation (unit, integration, functional, and regression).
• Conduct compliance-driven testing aligned with EU CRA, NIS2, and ISO 27001.
• Build and maintain security and compliance test suites in CI/CD pipelines (e.g., GitHub Actions, Jenkins, Azure DevOps).
• Execute vulnerability validation, SBOM verification, and dependency testing using SCA/SAST/DAST tools.
• Collaborate with developers to triage and validate remediation fixes for security and compliance findings.
• Generate audit-ready QA documentation for regulatory assessments.
• Support performance, reliability, and failover testing in security-critical systems.

Required Skills & Experience

• 5+ years of experience in QA or Test Automation for enterprise applications.
• Strong knowledge of C#, .NET, Angular, or Java-based testing frameworks.
• Experience with Selenium, Playwright, Postman, JMeter, or Robot Framework.
• Hands‑on experience with SAST/SCA tools (SonarQube, Snyk, Checkmarx, or similar).
• Familiarity with secure SDLC, OWASP Top 10, and DevSecOps pipelines.
• Working knowledge of compliance frameworks (CRA, SOC 2, ISO 27001).
• Strong analytical, debugging, and documentation skills.

Preferred Qualifications

• Bachelor’s or Master’s degree in Computer Science, Engineering, or related field.
• Experience in industrial or regulated domains (O&G, manufacturing, MedTech).
• Certifications: ISTQB Advanced Test Analyst, CSSLP, or CISSP (Associate).
• Familiarity with containerized testing environments (Docker/Kubernetes).

Why Join Us

You’ll work on mission‑critical systems where software quality equals resilience. Join a multidisciplinary team ensuring that industrial and enterprise applications are secure, compliant, and built to last.