Tester (QA / Security / 508) + Business Analyst

International Executive Service Corps; Washington, Northern (District of Columbia, KY); Hybrid; USD 90,000 - 125,000; Full time

Job summary

NuAxis is seeking a Tester (QA / Security / 508) + Business Analyst for a full-time hybrid role in Washington, DC. You will define requirements, write acceptance criteria, and ensure delivery across functional, security, and accessibility dimensions.

The role blends business analysis with hands-on testing: elicit requirements, develop test plans, perform Section 508/WCAG validation, support security testing, and drive UAT from planning to release readiness using Jira/Confluence and Cypress

Qualifications

• 6+ years combining business analysis and software quality assurance on enterprise web applications.
• Strong requirements elicitation, user story writing, and acceptance criteria definition in Agile teams.
• Hands-on functional, regression, and integration test design and execution.
• Section 508 / WCAG 2.1 AA testing proficiency with NVDA/JAWS and validation tooling (ANDI, axe, automated scanners).
• Familiarity with application security testing concepts, common vulnerability classes, and scan triage.
• SQL for data validation; API testing with Postman or equivalent.
• Jira/Confluence proficiency and disciplined traceability practice.
• Excellent written communication — able to produce documentation that survives government review.
• Hands-on Cypress or comparable modern web test automation experience; JavaScript/TypeScript automation skills strongly preferred.
• Experience integrating automated tests into GitLab CI/CD or equivalent and using automation results as release-readiness evidence.
• Ability to test complex Drupal forms, REST APIs, authentication, file upload, data rules, accessibility, security findings, and cross-browser/mobile behavior.

Responsibilities

• Elicit, analyze, and document business and functional requirements; write user stories with testable acceptance criteria.
• Model current- and future-state business processes; identify gaps, exceptions, and edge cases early.
• Build and execute test plans and test cases traceable to requirements; maintain a requirements traceability matrix.
• Execute functional, regression, integration, and user acceptance testing across releases.
• Perform Section 508 / WCAG 2.1 AA validation using approved tools and assistive technology; document defects and required remediation.
• Support security testing: scan result triage, vulnerability retest, security control validation evidence, and support to assessment teams.
• Manage defects in Jira through triage, retest, and closure; report quality metrics and release readiness.
• Facilitate stakeholder sessions, demos, and UAT coordination; capture and disposition feedback.
• Create and maintain automated regression tests for critical public-facing workflows using Cypress (preferred primary tool) and/or equivalent frameworks, and integrate them with CI/CD alongside API and accessibility checks.
• Translate business and non-functional requirements—including security, Section 508, browser/mobile, performance, audit logging, authentication, and data validation—into explicit acceptance criteria and traceable test coverage.
• Produce formal release test evidence and maintain end-to-end linkage among requirements, user stories, test cases, automated scripts, defects, and UAT outcomes in Jira/Confluence.

Skills

Business analysis

Software QA

Requirements elicitation

Test design & execution

Section 508 / WCAG testing

SQL for data validation

API testing

Jira/Confluence

Cypress

GitLab CI/CD

Education

Bachelor's degree in Information Systems, Business, or Computer Science

Tools

Cypress

Postman

Jira

Confluence

NVDA/JAWS

ANDI/axe

GitLab CI/CD

Job description

We are a federal IT company on a mission to make customer experience (CX) the center of every government solution.

Technology is our Passion. People are our Purpose.

We know tech, but we love people. NuAxis is home to thinkers and feelers; engineers and artists. We work hard and support each other along the way. Teamwork is more than just a buzzword for us, it’s a state of mind.

We believe happy employees do amazing work, so join our team NOW! We are currently seeking a talented and motivated Tester (QA / Security / 508) + Business Analyst for a Full-Time position.

Role Summary

Hybrid role spanning requirements definition and quality validation. Elicits and documents business requirements and acceptance criteria, then verifies that delivered software satisfies them across functional, security, and accessibility dimensions — closing the loop between what was asked for and what was built.

Key Responsibilities

• Elicit, analyze, and document business and functional requirements; write user stories with testable acceptance criteria.
• Model current- and future-state business processes; identify gaps, exceptions, and edge cases early.
• Build and execute test plans and test cases traceable to requirements; maintain a requirements traceability matrix.
• Execute functional, regression, integration, and user acceptance testing across releases.
• Perform Section 508 / WCAG 2.1 AA validation using approved tools and assistive technology; document defects and required remediation.
• Support security testing: scan result triage, vulnerability retest, security control validation evidence, and support to assessment teams.
• Manage defects in Jira through triage, retest, and closure; report quality metrics and release readiness.
• Facilitate stakeholder sessions, demos, and UAT coordination; capture and disposition feedback.
• Create and maintain automated regression tests for critical public-facing workflows using Cypress (preferred primary tool) and/or equivalent frameworks, and integrate them with CI/CD alongside API and accessibility checks.
• Translate business and non-functional requirements—including security, Section 508, browser/mobile, performance, audit logging, authentication, and data validation—into explicit acceptance criteria and traceable test coverage.
• Produce formal release test evidence and maintain end-to-end linkage among requirements, user stories, test cases, automated scripts, defects, and UAT outcomes in Jira/Confluence.

Required Skills & Experience

• 6+ years combining business analysis and software quality assurance on enterprise web applications.
• Strong requirements elicitation, user story writing, and acceptance criteria definition in Agile teams.
• Hands-on functional, regression, and integration test design and execution.
• Section 508 / WCAG 2.1 AA testing proficiency with NVDA/JAWS and validation tooling (ANDI, axe, automated scanners).
• Familiarity with application security testing concepts, common vulnerability classes, and scan triage.
• SQL for data validation; API testing with Postman or equivalent.
• Jira/Confluence proficiency and disciplined traceability practice.
• Excellent written communication — able to produce documentation that survives government review.
• Hands-on Cypress or comparable modern web test automation experience; JavaScript/TypeScript automation skills strongly preferred.
• Experience integrating automated tests into GitLab CI/CD or equivalent and using automation results as release-readiness evidence.
• Ability to test complex Drupal forms, REST APIs, authentication, file upload, data rules, accessibility, security findings, and cross-browser/mobile behavior.

Preferred Qualifications

• DHS Trusted Tester certification; CBAP, ISTQB, or equivalent.
• Additional automation experience with Playwright, Selenium, REST Assured, Postman/Newman, or equivalent tools.
• Experience with public-facing form-heavy applications and complex eligibility logic.
• Federal accessibility compliance program experience.

Education

Bachelor's degree in Information Systems, Business, Computer Science, or a related field; equivalent experience considered.

Our Profile:

We are an IT company with a unique mission—to make people the center of every federal IT solution. Our technologists have always gone the extra mile to help our federal clients succeed. And over the years, we saw a growing disconnect in how federal IT initiatives were built and managed.Time after time, programs failed because the focus was on the tools and products and not the people using them.

NuAxis is an Equal Opportunity Employer. Employment is contingent upon successful completion of a background investigation.