Hybrid NJ: Security QA & DevSecOps Engineer

Groupe Kardol; Jersey City (NJ); On-site; USD 120,000 - 160,000; Full time

Job summary

Groupe Kardol in New Jersey is seeking a Security QA to join a hybrid team. You will integrate security testing into CI/CD, balance quality engineering, and collaborate with engineering, platform, and product teams to reduce risk and accelerate secure releases.

The role emphasizes building scalable automation across web, API, and backend services, enforcing OWASP practices, and driving vulnerability management, incident response, and infrastructure hardening.

Qualifications

• Experience integrating security testing into CI/CD pipelines.
• Strong knowledge of OWASP principles.
• Ability to design scalable automation frameworks.
• Experience with cloud security and infrastructure hardening.

Responsibilities

• Identify, triage, and remediate vulnerabilities across applications and cloud.
• Integrate security testing into CI/CD pipelines.
• Monitor pipelines for vulnerabilities and misconfigurations.
• Drive patching, remediation, and infrastructure hardening.
• Collaborate on incident response and root cause analysis.
• Develop test automation for web, API, and backend systems.

Skills

Security testing

DevSecOps

Quality engineering

Automation

Tools

SAST

DAST

SCA

Container scanning

OWASP

IAM

Job description

Groupe Kardol in New Jersey is seeking a Security QA to join a hybrid team. You will integrate security testing into CI/CD, balance quality engineering, and collaborate with engineering, platform, and product teams to reduce risk and accelerate secure releases.

The role emphasizes building scalable automation across web, API, and backend services, enforcing OWASP practices, and driving vulnerability management, incident response, and infrastructure hardening.