Principal SDET – Cybersecurity Test Engineer (1155922)

The Judge Group; Lakewood (CO); On-site; USD 145,000 - 180,000; Full time

Benefits offered by this job

Comprehensive benefits

Health

401k

Job summary

The Judge Group is seeking an SDET/QA cybersecurity specialist in Healthcare to lead security testing across Scrum teams in Lakewood, CO. The role requires defining strategies, building test plans to meet regulatory standards, and mentoring engineers in secure testing practices.

You will drive automated testing initiatives, perform risk and vulnerability assessments, and integrate security throughout the product lifecycle in a direct-hire arrangement.

Qualifications

• Experience defining cybersecurity test strategies across QA teams.
• Ability to train and mentor engineers in security testing practices.
• Build test plans meeting regulatory standards for healthcare software.

Responsibilities

• Define a standardized cybersecurity testing strategy for the QA org.
• Train and mentor engineers on cybersecurity testing practices.
• Build cybersecurity test plans that meet medical device standards.
• Run risk and vulnerability assessments and implement testing protocols.
• Oversee automated test scripts across the test pyramid and security patterns.
• Lead DAST activities and advise on security test automation.
• Collaborate with architecture to set security testing standards.
• Partner with development, cybersecurity, QA, and architects to embed security.

Skills

Cybersecurity testing

Automation testing

Risk assessment

DAST

Test automation frameworks

Tools

Automation frameworks

Security testing tools

Code analysis tools

Job description

Location: Lakewood, CO

Salary: $145,000.00 USD Annually - $180,000.00 USD Annually

Description

Company: Healthcare

Position: SDET/QA Cybersecurity

Duration: Direct hire/permanent

Benefits:

• comprehensive benefits
• Health
• 401k

Essential Duties

• Define a standardized cybersecurity testing strategy for the Software Quality Engineering organization that aligns with product architecture, regulatory requirements, and business goals.
• Train and mentor engineers on cybersecurity testing practices, build training materials, and run knowledge transfer sessions so teams can execute independently.
• Build cybersecurity test plans that meet medical device regulatory standards.
• Run risk and vulnerability assessments on new and existing products and put security testing protocols in place to protect sensitive data.
• Oversee the design and execution of automated test scripts and frameworks across all levels of the test pyramid and apply design patterns suited to security testing.
• Lead dynamic application security testing (DAST) and advise the group on the feasibility, implementation, and maintenance of cybersecurity test automation.
• Work with architecture teams to set cybersecurity testing standards and shape software architecture and development practices so vulnerabilities surface earlier.
• Partner with development, cybersecurity, quality assurance, peer engineers, and architects to find vulnerabilities and embed security testing into the product lifecycle.
• Coordinate with external partners and consultants on joint security testing.
• Contribute to multiple codebases within Scrum teams, resolve environment and test automation issues, and review and approve code and test changes.
• Lead discussions about which test level is right for a given piece of functionality, and engage at any test level when the work requires it.
• Keep up with new cybersecurity threats, tools, and practices, and revise testing methods when needed.

Other Duties And Responsibilities

• Provide strategic leadership for the functional group and keep its direction aligned with company policies and business goals.
• Work with regulatory and quality assurance peers to improve processes that meet industry standards and company-specific benchmarks. Support inspection readiness with clear processes, documentation, and traceability.
• Supervise Software Quality Engineering and testing activities across teams so best practices stay consistent organization wide. Keep tests maintainable, reusable, and scalable so they integrate cleanly across projects.