Tester (QA / Security / 508) + Business Analyst

NuAxis Innovations; United States; Hybrid; USD 110,000 - 140,000; Full time

Job summary

NuAxis Innovations is seeking a Tester (QA / Security / 508) + Business Analyst for a Full-Time position in the United States. The hybrid role supports an Agile delivery team modernizing WHD’s legacy .NET apps to Drupal 10+ on AWS, with public portals for wage surveys and complaint intake.

The role covers requirements elicitation through release-ready functionality, including Section 508 and security test evidence for each production release. Strong federal SAFe experience is preferred.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Business, or related field.
• 5+ years of combined software quality assurance and business analysis experience, incl. 3+ years in federal Agile/SAFe.
• Current DHS Trusted Tester certification for Section 508 knowledge.
• Hands-on experience writing user stories, acceptance criteria, and test cases in Jira and Confluence (Xray, Zephyr, or similar).
• Working knowledge of web application security testing and NIST SP 800-53 / ATO support activities.
• Experience testing public-facing portals and REST APIs; familiarity with Postman or similar tools.
• Strong written communication and stakeholder facilitation skills.
• U.S. person; must obtain and maintain favorable background clearance (NACI / HSPD-12).

Responsibilities

• Facilitate requirements elicitation with WHD Product Owners, SMEs, and OCIO stakeholders, break down needs into Jira artifacts.
• Document and maintain process flows, use cases, wireframes, and requirements traceability in Jira/Confluence.
• Develop sprint- and release-level test plans, test cases, and test scripts; support various testing types.
• Test Drupal/Portal forms and integrations with Login.gov, Appian, SharePoint; ensure bilingual content and auditing.
• Perform Section 508 / WCAG AA conformance testing using DHS tools and assistive tech., ensure accessibility.
• Conduct application security testing supporting DevSecOps and ATO; review OWASP Top 10 and remediation.
• Support security test & evaluation activities and assessment teams during system tests.
• Log, categorize, and trace defects; deliver end-to-end defect reports at test cycle close.
• Prepare release-readiness evidence: Section 508, mobile, security, and functional test reports.

Skills

Quality assurance

Business analysis

Federal Agile/SAFe

Requirements elicitation

Stakeholder facilitation

Test design

Education

Bachelor’s degree in Computer Science, Information Systems, Business or related field

Tools

Jira

Confluence

Xray

Zephyr

Postman

Job description

We are a federal IT company on a mission to make customer experience (CX) the center of every government solution. Technology is our Passion. People are our Purpose.

We know tech, but we love people. NuAxis is home to thinkers and feelers; engineers and artists. We work hard and support each other along the way. Teamwork is more than just a buzzword for us, it’s a state of mind.

We believe happy employees do amazing work, so join our team NOW! We are currently seeking a talented and motivated Tester (QA / Security / 508) + Business Analyst for a Full-Time position.

Role Summary

A hybrid quality assurance and business analysis role on an Agile delivery team modernizing WHD’s legacy .NET applications (Workers Owed Wages, External User Portal, Section 14(c), FLC Online, DirectoryAdmin) to Drupal 10+ on DOL’s PACE containerized AWS platform, and building new public-facing portals for wage determination surveys and online complaint intake. The role owns the path from requirements elicitation to accepted, release-ready functionality, including functional, security, and Section 508 test evidence required for every production release.

Key Responsibilities

• Facilitate requirements elicitation with WHD Product Owners, SMEs, and OCIO stakeholders; decompose needs into Jira epics, features, and user stories with clear, testable acceptance criteria.
• Document and maintain process flows, use cases, wireframe annotations, and requirements traceability in Jira and Confluence.
• Develop sprint- and release-level test plans, test cases, and test scripts; execute functional, integration, regression, and user acceptance testing support.
• Test Drupal Webform-based forms and integrations with Login.gov, WISE/CAPS on Appian, SharePoint, and Kafka, including real-time inline validation, one-time submission rules, bilingual (English/Spanish) content, and audit logging.
• Perform Section 508 / WCAG AA conformance testing using the DHS Trusted Tester methodology and DOL-approved tools (ANDI, NVDA, JAWS, Compliance Sheriff), including keyboard operability and assistive technology compatibility.
• Conduct application security testing in support of DevSecOps and the ATO: validate OWASP Top 10 protections (XSS, CSRF, SQL injection), review scan results, and verify remediation of STIG and SRR findings.
• Support OCIO security test and evaluation activities and assessment teams during system security testing.
• Log, categorize, and trace defects per OCIO categories with full linkage (Roadmap → User Story → Task → Defect); deliver end‑to‑end defect reports at the close of every test cycle.
• Assemble release‑readiness evidence: Section 508, mobile/tablet, security, and functional test reports, with no open in‑sprint defects.
• Participate in all Agile/SAFe ceremonies, including sprint planning, daily stand‑ups, reviews, and retrospectives.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Business, or a related field (or equivalent experience).
• 5+ years of combined software quality assurance and business analysis experience, including 3+ years in federal Agile/SAFe environments.
• Current DHS Trusted Tester certification (verification of Section 508 knowledge is required for contract personnel).
• Hands‑on experience writing user stories, acceptance criteria, and test cases in Jira and Confluence (Xray, Zephyr, or similar).
• Working knowledge of web application security testing (OWASP Top 10) and NIST SP 800-53 / ATO support activities.
• Experience testing public‑facing web portals and forms, including REST API testing with Postman or similar tools.
• Strong written communication and stakeholder facilitation skills.
• U.S. person; must obtain and maintain a favorable NACI / HSPD‑12 background investigation.

Preferred Qualifications

• Experience testing Drupal 10+ applications, Appian integrations, or Login.gov authentication flows.
• Exposure to test automation (Cypress, Playwright, or Selenium).
• Certifications such as CBAP/CCBA, ISTQB, CSM/CSPO, SAFe, or CompTIA Security+.
• Prior support of DOL or another federal enforcement or regulatory agency.
• Experience using DOL-approved AI tools (e.g., Microsoft Copilot) to accelerate requirements and test case development.

Does this opportunity sound like a fit for you?

Our Profile:

We are an IT company with a unique mission—to make people the center of every federal IT solution. Our technologists have always gone the extra mile to help our federal clients succeed. And over the years, we saw a growing disconnect in how federal IT initiatives were built and managed. Time after time, programs failed because the focus was on the tools and products and not the people using them. Learn More.

NuAxis is an Equal Opportunity Employer. Employment is contingent upon successful completion of a background investigation. Learn More about our Benefits and Culture! #NAI #DICE