QA Engineer | DevSecOps & Security CI/CD Expert

CEdge Inc.; St. Louis (MO); Hybrid; USD 90,000 - 130,000; Full time

Job summary

CEdge Inc. seeks a QA Engineer / DevSecOps Analyst to own the quality and security pipeline across TMS web applications. The role ensures 90-day scans, high-threat remediation within 10 days, and that every deliverable passes quality gates for MoDOT acceptance.

The position requires coordinating with developers, maintaining CI/CD in Azure DevOps, and developing automated test suites for critical modules, all while supporting accessibility testing and security metrics reporting.

Qualifications

• 3+ years in software QA, test engineering, or application security.
• Hands-on with SAST tools (SonarQube, Veracode, Checkmarx).
• CI/CD experience in Azure DevOps, Jenkins, or equivalents.
• Experience writing and executing test plans, cases, and regression suites for .NET web apps.
• Ability to classify CVSS vulnerabilities and communicate remediation priorities to developers.
• Willingness to undergo MoDOT background checks.
• Familiarity with OWASP Top 10 and secure coding practices.

Responsibilities

• Schedule, execute, and report 90-day security scans for critical and external-facing TMS web apps.
• Triage scan results and track High-Threat remediation within 10 business days.
• Operate and maintain the CI/CD pipeline in Azure DevOps: configure build triggers, tests, and gate controls.
• Develop and maintain automated test suites for high-risk TMS modules.
• Execute SOW quality gates: verify unit/integration/system tests and prepare staging packages.
• Participate in code reviews from security/test-coverage perspective.
• Track and report security and quality metrics weekly; provide monthly compliance evidence.
• Ensure mirrored workstation environment matches MoDOT toolchain; coordinate updates within 30 days.
• Support ADA/Section 508 accessibility testing for all new/modified web apps.

Skills

QA experience

SAST tools

CI/CD pipelines

Test planning

Vulnerability triage

OWASP Top 10

Accessibility testing

Education

CompTIA Security+

GIAC GWEB

Tools

Azure DevOps

Jenkins

Job description

CEdge Inc. seeks a QA Engineer / DevSecOps Analyst to own the quality and security pipeline across TMS web applications. The role ensures 90-day scans, high-threat remediation within 10 days, and that every deliverable passes quality gates for MoDOT acceptance.

The position requires coordinating with developers, maintaining CI/CD in Azure DevOps, and developing automated test suites for critical modules, all while supporting accessibility testing and security metrics reporting.