Senior Software Quality Engineer

Senior Software Quality Engineer

Role Overview:

As a Senior Software Quality Engineer in NDR QA team at Trellix, you will be responsible for developing and executing comprehensive test plans and methodologies that validate functionality, performance, other aspects and automating the test cases using python language.

About the Role:

• Demonstrated expertise in the Cybersecurity domain, complemented by robust test engineering proficiencies.
• Comprehensive understanding of networking fundamentals and substantial practical experience with Intrusion Detection System (IDS)/Network Detection and Response (NDR) workflows.
• In-depth knowledge of contemporary no-code/low-code orchestration paradigms employed within enterprise Security Operations Center (SOC) environments.
• Highly motivated professional exhibiting a profound commitment to and passion for software quality assurance.
• Proven capability in the authorship of test cases and development of test code, coupled with effective test execution methodologies.
• Active participation in formal Design Reviews and comprehensive Code Inspections.
• Designing and developing automated tools or frameworks to attain highly optimized and effective test coverage.
• Validation of end-to-end threat detection pipelines, encompassing packet capture, flow analysis, alert generation, and subsequent response actions.
• Ensuring inherent testability within product features and consistently measuring and analyzing code coverage data
• Performing meticulous debugging and systematic troubleshooting across a variety of local and remote testing environments, including providing in-field support when requisite.
• Effective collaboration with cross-functional teams, specifically Engineering, Detection, and Product Management.

About You :

• A requisite of 5-10 years of professional experience in product testing and development is mandatory. This tenure must encompass expertise in code review and bug analysis, the formulation of test tools, the meticulous design of comprehensive test cases, and a substantial contribution to effective test planning.
• A profound and demonstrated understanding of networking concepts (TCP/IP, HTTP/HTTPS, DNS, VPN, Routing, Proxies, Subnets, Ports) and foundational security principles (firewalls, intrusion detection, lateral movement, malware, MITRE ATT&CK) is deemed essential.
• Practical experience is required in network traffic analysis through the utilization of industry-standard tools such as Wireshark, Zeek/Bro, Suricata/Snort, or tcpdump.
• The capacity to design and execute comprehensive test plans for Network Detection and Response (NDR) product features, specifically including detection rules, Machine Learning (ML) analytics, and alerting mechanisms, is necessary.
• Experience is expected in the testing of streaming data pipelines and event correlation mechanisms, leveraging established technologies such as Apache Kafka and Apache Flink.
• Proficiency in the validation of alert response workflows (block, isolate, enrich, forward to SIEM/SOAR) is mandated; a perspective informed by Security Operations Center (SOC) practices regarding alert quality and workflow efficacy is considered highly advantageous.
• Knowledge of prevalent security frameworks and compliance standards (MITRE ATT&CK, NIST, OCSF, etc.) is mandatory.
• Practical experience in the development of automated UI, API, and functional test scenarios utilizing Python or comparable scripting frameworks (e.g., PyTest, Selenium, Playwright) is a prerequisite.
• The candidate will be responsible for maintaining QA infrastructure and integrating automated tests into continuous integration/continuous deployment (CI/CD) pipelines (Jenkins, GitLab CI, or similar).
• Proficiency in operating within Linux-based systems and a foundational familiarity with cloud (AWS/Azure/GCP) or virtualized environments utilized for the deployment of NDR sensors and controllers is essential.
• The role necessitates collaborative engagement with detection engineers and developers to accurately reproduce reported issues, furnish high-quality defect reports, and define robust regression suites for critical detections and workflows.

Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.