QA Analyst – Security Testing

Bizmoni Corp.Software testing

BrazilPart-TimeMiddle

SalaryBizmoni currently offers ONLY an equity-based compensation model

Apply NowOpens the employer's application page

Job Details

Experience: 3+ years in manual QA, testing web applications and APIs in an Agile environment.
Required Skills: JiraManual testingTestRailAzure DevOpsPostman

Have 3+ years of manual QA experience testing web applications and APIs in an Agile environment.
Design structured test cases using techniques such as boundary value analysis, equivalence partitioning and state transition.
Analyze user stories and acceptance criteria, identify gaps and turn requirements into testable scenarios.
Create and maintain test plans, traceability matrices and test summary reports.
Have hands-on experience with Jira or Azure DevOps and a test management tool such as TestRail, Xray or Zephyr.
Use Postman for API testing.
Understand web technologies, HTTP and REST, and basic SQL for data checking.
Have working knowledge of the OWASP Top 10 and checking for common issues during manual testing.
Write precise defect reports and explain quality risks to technical and non-technical audiences.
Commit approximately 8–16 hours per week; the posting also asks applicants to be open to dedicating a minimum of 16 hours weekly.
Have a personal computer with a camera and reliable internet connection.
Nice to have: ISTQB Foundation certification, Burp Suite or OWASP ZAP experience, exposure to Playwright, Selenium or Cypress, UAT experience, regulated-sector experience, or WCAG 2.2 accessibility testing.

Review user stories, specifications and acceptance criteria, and raise gaps, ambiguities and risks before development starts.
Participate in backlog refinement and sprint ceremonies with Business Analysts, Product Owners and developers.
Write test plans, scenarios and detailed test cases with expected results and test data.
Maintain a requirements traceability matrix to track test coverage.
Run manual functional, regression, integration, end-to-end and exploratory tests across web, mobile and API layers.
Test APIs manually using tools such as Postman or Swagger.
Log defects with reproduction steps, expected and actual results, evidence and severity, and track them through closure.
Retest fixes, maintain regression test packs and support UAT by preparing scripts, guiding business users and capturing feedback.
Perform basic security checks, including access control, input validation, session handling and OWASP Top 10 checks, and escalate findings to the security team.
Produce test and release-readiness reports, track QA metrics, maintain documentation and provide testing evidence for audits.

View Full Description & ApplyYou'll be redirected to the employer's site