Tester (QA / Security / 508) + Business Analyst

NuAxis, LLC; United States; Hybrid; USD 95,000 - 125,000; Full time

Job summary

NuAxis, LLC is seeking a Tester (QA / Security / 508) + Business Analyst for a Full-Time position on a hybrid Agile delivery team modernizing legacy .NET applications to Drupal 10+ on DOL’s AWS platform, building new public portals for wage determination surveys and online complaint intake.

The role owns the path from requirements elicitation to accepted, release-ready functionality, including security and Section 508 test evidence required for production releases.

Qualifications

• 5+ years in software QA and business analysis, including federal Agile/SAFe experience.
• Current DHS Trusted Tester certification.
• Experience writing user stories, acceptance criteria, and test cases in Jira/Confluence.
• Experience in web security testing (OWASP Top 10) and NIST SP 800-53 / ATO support.
• Experience testing public-facing portals and REST APIs.

Responsibilities

• Facilitate requirements elicitation with WHD Product Owners and stakeholders.
• Decompose needs into Jira epics, features, and user stories with acceptance criteria.
• Develop sprint- and release-level test plans, cases, and scripts.
• Test Drupal/ web forms and integrations (Login.gov, WISE/CAPS, Appian, SharePoint, Kafka).
• Perform Section 508 / WCAG AA testing using DHS methods and tools.
• Conduct application security testing and verify OWASP protections and remediation.
• Assemble release-readiness evidence and end-of-sprint defect reports.
• Participate in Agile/SAFe ceremonies.

Skills

QA & BA experience

Jira/Confluence

DHS Trusted Tester

OWASP Top 10

REST API testing

Written communication

U.S. person background check

Education

Bachelor’s degree in Computer Science / Information Systems / related field

Tools

Xray / Zephyr

Postman

Job description

We are a federal IT company on a mission to make customer experience (CX) the center of every government solution.

Technology is our Passion. People are our Purpose.

We know tech, but we love people. NuAxis is home to thinkers and feelers; engineers and artists. We work hard and support each other along the way. Teamwork is more than just a buzzword for us, it’s a state of mind.

We believe happy employees do amazing work, so join our team NOW! We are currently seeking a talented and motivated Tester (QA / Security / 508) + Business Analyst for a Full-Time position.

Role Summary

A hybrid quality assurance and business analysis role on an Agile delivery team modernizing WHD’s legacy .NET applications (Workers Owed Wages, External User Portal, Section 14(c), FLC Online, DirectoryAdmin) to Drupal 10+ on DOL’s PACE containerized AWS platform, and building new public-facing portals for wage determination surveys and online complaint intake. The role owns the path from requirements elicitation to accepted, release-ready functionality, including functional, security, and Section 508 test evidence required for every production release.

Key Responsibilities

• Facilitate requirements elicitation with WHD Product Owners, SMEs, and OCIO stakeholders; decompose needs into Jira epics, features, and user stories with clear, testable acceptance criteria.
• Document and maintain process flows, use cases, wireframe annotations, and requirements traceability in Jira and Confluence.
• Develop sprint- and release-level test plans, test cases, and test scripts; execute functional, integration, regression, and user acceptance testing support.
• Test Drupal Webform-based forms and integrations with Login.gov, WISE/CAPS on Appian, SharePoint, and Kafka, including real-time inline validation, one-time submission rules, bilingual (English/Spanish) content, and audit logging.
• Perform Section 508 / WCAG AA conformance testing using the DHS Trusted Tester methodology and DOL-approved tools (ANDI, NVDA, JAWS, Compliance Sheriff), including keyboard operability and assistive technology compatibility.
• Conduct application security testing in support of DevSecOps and the ATO: validate OWASP Top 10 protections (XSS, CSRF, SQL injection), review scan results, and verify remediation of STIG and SRR findings.
• Support OCIO security test and evaluation activities and assessment teams during system security testing.
• Log, categorize, and trace defects per OCIO categories with full linkage (Roadmap → User Story → Task → Defect); deliver end-to-end defect reports at the close of every test cycle.
• Assemble release-readiness evidence: Section 508, mobile/tablet, security, and functional test reports, with no open in-sprint defects.
• Participate in all Agile/SAFe ceremonies, including sprint planning, daily stand-ups, reviews, and retrospectives.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Business, or a related field (or equivalent experience).
• 5+ years of combined software quality assurance and business analysis experience, including 3+ years in federal Agile/SAFe environments.
• Current DHS Trusted Tester certification (verification of Section 508 knowledge is required for contract personnel).
• Hands‑on experience writing user stories, acceptance criteria, and test cases in Jira and Confluence (Xray, Zephyr, or similar).
• Working knowledge of web application security testing (OWASP Top 10) and NIST SP 800‑53 / ATO support activities.
• Experience testing public-facing web portals and forms, including REST API testing with Postman or similar tools.
• Strong written communication and stakeholder facilitation skills.
• U.S. person; must obtain and maintain a favorable NACI / HSPD-12 background investigation.

Preferred Qualifications

• Experience testing Drupal 10+ applications, Appian integrations, or Login.gov authentication flows.
• Exposure to test automation (Cypress, Playwright, or Selenium).
• Certifications such as CBAP/CCBA, ISTQB, CSM/CSPO, SAFe, or CompTIA Security+.
• Prior support of DOL or another federal enforcement or regulatory agency.
• Experience using DOL-approved AI tools (e.g., Microsoft Copilot) to accelerate requirements and test case development.

Our Profile:

We are an IT company with a unique mission—to make people the center of every federal IT solution. Our technologists have always gone the extra mile to help our federal clients succeed. And over the years, we saw a growing disconnect in how federal IT initiatives were built and managed.Time after time, programs failed because the focus was on the tools and products and not the people using them

NuAxis is an Equal Opportunity Employer. Employment is contingent upon successful completion of a background investigation.Learn Moreabout our Benefits and Culture!

#NAI #DICE