Infiterra

• Own the problem framing, prioritization, and outcomes for one product domain — measured by adoption, retention, margin, and time-to-onboard. • Ensure nothing enters a sprint without a validated problem statement, a defined success criterion, and acceptance criteria and shape an MVP that ships • Work with Architecture and Engineering to confirm that new capabilities respect platform constraints, multi-tenancy boundaries, and integration dependencies; so technical debt isn't the price of speed. • Translate leadership decisions and quarterly priorities into a ranked, sized, sequenced backlog your team can execute without ambiguity. • Hold the Definition of Ready — decide what enters a sprint, in what sequence, and at what MVP cut line • Maintain a continuous customer feedback loop, converting recurring signals into prioritized backlog • Convert ambiguous requirements into testable user stories and acceptance criteria before they reach engineering, eliminating rework from unclear scope. • Act as the single point of translation between stakeholders and the team, preventing conflicting direction from reaching engineering

• Own the full automated testing coverage across functional, smoke, regression, API, integration, and end-to-end layers - ensuring critical platform flows like ordering, billing, subscriptions, renewals, and vendor integrations are validated reliably before every release. • Own E2E test automation using Selenium and Playwright, and contribute to API and integration-level coverage where it delivers faster, more stable results. • Validate REST APIs thoroughly - payloads, error handling, negative scenarios, and auth flows - so integration failures are caught before they reach production. • Catch quality problems before development starts by driving 3 Amigos sessions, challenging acceptance criteria, and surfacing edge cases during refinement. • Make defects easier to fix — reproduce issues clearly, trace root causes using logs, SQL, and pipeline data, so developers can act without re-investigating. • Support CI/CD pipeline health — monitor automated test execution, investigate failures, eliminate flaky tests, and ensure test results are meaningful enough to base release decisions on. • Raise the quality bar on the automation suite — improve maintainability, close coverage gaps, and leave the framework in better shape than you found it. • Validate data integrity at the source — use SQL and backend checks to confirm that billing, provisioning, and integration flows produce correct outcomes, not just passing UI tests. • Prioritize testing effort by risk — focus coverage where customer impact and defect history and release scope point to the highest likelihood of failure, not where it's easiest to automate. • Own the test data layer — build and maintain fixtures and preconditions so automated and manual tests run reliably without brittle setup dependencies.

• Handle customer tickets end-to-end, how-tos, product questions, and basic bug reports. • Investigate, reproduce, and validate reported issues and bugs, escalating complex cases to the right people. • Carry out routine operational tasks: data imports, catalog updates, order setup, onboarding configuration. • Log and update customer cases with documentation. • Track and meet SLAs, maintaining customer satisfaction in every interaction. • Document your work clearly so others can learn from it and cases are well-tracked. • Identify and flag gaps in product documentation and share findings with relevant teams. • Participate in a rotating shift schedule to support our customers in different time zones (1 week evenings, 3 weeks mornings). • Collaborate with engineering, QA, and product teams to resolve complex issues.

• Own post-sales onboarding projects from kickoff through go-live. • Act as project manager for customer implementations, coordinating internal teams and customer stakeholders. • Lead hands-on configuration, setup, and customization of the platform (no coding required). • Deliver customer training sessions, both remote and on-site when needed. • Serve as the Subject matter expert on Infiterra platform for assigned customers, translating business requirements in platform workflows. • Manage timelines, dependencies, risks, and stakeholder communication throughout implementation. • Engage customers during hyper-care periods following go-live. • Conduct regular cadence calls and ensure follow-up on action items. • Maintain account ownership and handle health issues, including ticket escalation. • Participate in QBRs and support strategic accounts as necessary. • Follow through on QBR outcomes, such as adoption, optimization, and expansion activities. • Work confidently with stakeholders at all levels, from end users to C-level executives. • Work closely with the Product and Engineering teams to ensure that customer feedback is thoroughly evaluated and appropriately incorporated into the product roadmap.

• Create, execute, and maintain comprehensive manual test cases for complex web applications. • Use Postman to perform thorough API testing, validating status codes, payloads, and error handling. • Partner with Automation Test Engineers to identify manual test cases that are high-priority for automation and identify gaps in existing test coverage. • Write and execute SQL queries to perform database validation and ensure backend data aligns with the front-end UI. • Identify, document, and track software defects within Jira, providing detailed logs, screenshots, and clear reproduction steps. • Manage and update Work Items within Azure DevOps to ensure testing progress is transparent and aligned with sprint goals. • Use Azure DevOps to review automation run results and maintain alignment between manual test cases and the automated suite. • Actively participate in Sprint Planning, Daily Stand-ups, and Retrospectives to provide a QA perspective on upcoming features.

• Embed security into the SDLC • Integrate security activities across all SDLC phases: requirements, design, implementation, testing, deployment, and maintenance. • Partner closely with engineering teams to ensure secure development practices are applied consistently. • Review security controls for new features, services, and architectural changes. • Run threat modeling sessions (e.g. STRIDE) for new and existing systems. • Identify threats, attack paths, misconfigurations, and insecure design patterns. • Collaborate with engineers to ensure systems follow secure-by-design principles. • Perform security-focused code reviews to identify vulnerabilities and risky implementations. • Provide clear, actionable guidance on secure coding patterns and best practices. • Assess application and system architectures from a security perspective. • Perform manual and automated web application security testing (e.g. injection flaws, auth issues, access control gaps, insecure configs, logic flaws). • Operate, tune, and improve AppSec tooling (SAST, DAST, SCA, secrets scanning, dependency scanning). • Integrate and automate security checks within CI/CD pipelines. • Identify gaps in tooling and recommend or introduce improvements. • Support engineering teams during application security incidents or vulnerability disclosures. • Contribute to triage, impact assessment, and root cause analysis. • Ensure lessons learned are fed back into design, tooling, and processes. • Enable engineers through training, documentation, and hands-on guidance. • Create and maintain secure coding guidelines, checklists, and internal resources. • Act as a trusted security partner, not a blocker.

• Embed security into the SDLC. • Integrate security activities across all SDLC phases: requirements, design, implementation, testing, deployment, and maintenance. • Partner closely with engineering teams to ensure secure development practices are applied consistently. • Review security controls for new features, services, and architectural changes. • Run threat modeling sessions (e.g. STRIDE) for new and existing systems. • Identify threats, attack paths, misconfigurations, and insecure design patterns. • Collaborate with engineers to ensure systems follow secure-by-design principles. • Perform security-focused code reviews to identify vulnerabilities and risky implementations. • Provide clear, actionable guidance on secure coding patterns and best practices. • Assess application and system architectures from a security perspective. • Perform manual and automated web application security testing (e.g. injection flaws, auth issues, access control gaps, insecure configs, logic flaws). • Operate, tune, and improve AppSec tooling (SAST, DAST, SCA, secrets scanning, dependency scanning). • Integrate and automate security checks within CI/CD pipelines. • Identify gaps in tooling and recommend or introduce improvements. • Support engineering teams during application security incidents or vulnerability disclosures. • Contribute to triage, impact assessment, and root cause analysis. • Ensure lessons learned are fed back into design, tooling, and processes. • Enable engineers through training, documentation, and hands-on guidance. • Create and maintain secure coding guidelines, checklists, and internal resources. • Act as a trusted security partner, not a blocker.

• Embed security into the SDLC. • Integrate security activities across all SDLC phases: requirements, design, implementation, testing, deployment, and maintenance. • Partner closely with engineering teams to ensure secure development practices are applied consistently. • Review security controls for new features, services, and architectural changes. • Run threat modeling sessions (e.g. STRIDE) for new and existing systems. • Identify threats, attack paths, misconfigurations, and insecure design patterns. • Collaborate with engineers to ensure systems follow secure-by-design principles. • Perform security-focused code reviews to identify vulnerabilities and risky implementations. • Provide clear, actionable guidance on secure coding patterns and best practices. • Assess application and system architectures from a security perspective. • Perform manual and automated web application security testing (e.g. injection flaws, auth issues, access control gaps, insecure configs, logic flaws). • Operate, tune, and improve AppSec tooling (SAST, DAST, SCA, secrets scanning, dependency scanning). • Integrate and automate security checks within CI/CD pipelines. • Identify gaps in tooling and recommend or introduce improvements. • Support engineering teams during application security incidents or vulnerability disclosures. • Contribute to triage, impact assessment, and root cause analysis. • Ensure lessons learned are fed back into design, tooling, and processes. • Enable engineers through training, documentation, and hands-on guidance. • Create and maintain secure coding guidelines, checklists, and internal resources. • Act as a trusted security partner, not a blocker.

• Embed security into the SDLC • Integrate security activities across all SDLC phases: requirements, design, implementation, testing, deployment, and maintenance. • Partner closely with engineering teams to ensure secure development practices are applied consistently. • Review security controls for new features, services, and architectural changes. • Run threat modeling sessions (e.g. STRIDE) for new and existing systems. • Identify threats, attack paths, misconfigurations, and insecure design patterns. • Collaborate with engineers to ensure systems follow secure-by-design principles. • Perform security-focused code reviews to identify vulnerabilities and risky implementations. • Provide clear, actionable guidance on secure coding patterns and best practices. • Assess application and system architectures from a security perspective. • Perform manual and automated web application security testing (e.g. injection flaws, auth issues, access control gaps, insecure configs, logic flaws). • Operate, tune, and improve AppSec tooling (SAST, DAST, SCA, secrets scanning, dependency scanning). • Integrate and automate security checks within CI/CD pipelines. • Identify gaps in tooling and recommend or introduce improvements. • Support engineering teams during application security incidents or vulnerability disclosures. • Contribute to triage, impact assessment, and root cause analysis. • Ensure lessons learned are fed back into design, tooling, and processes. • Enable engineers through training, documentation, and hands-on guidance. • Create and maintain secure coding guidelines, checklists, and internal resources. • Act as a trusted security partner, not a blocker.

• Embed security into the SDLC • Integrate security activities across all SDLC phases: requirements, design, implementation, testing, deployment, and maintenance. • Partner closely with engineering teams to ensure secure development practices are applied consistently. • Review security controls for new features, services, and architectural changes. • Run threat modeling sessions (e.g. STRIDE) for new and existing systems. • Identify threats, attack paths, misconfigurations, and insecure design patterns. • Collaborate with engineers to ensure systems follow secure-by-design principles. • Perform security-focused code reviews to identify vulnerabilities and risky implementations. • Provide clear, actionable guidance on secure coding patterns and best practices. • Assess application and system architectures from a security perspective. • Perform manual and automated web application security testing (e.g. injection flaws, auth issues, access control gaps, insecure configs, logic flaws). • Operate, tune, and improve AppSec tooling (SAST, DAST, SCA, secrets scanning, dependency scanning). • Integrate and automate security checks within CI/CD pipelines. • Identify gaps in tooling and recommend or introduce improvements. • Support engineering teams during application security incidents or vulnerability disclosures. • Contribute to triage, impact assessment, and root cause analysis. • Ensure lessons learned are fed back into design, tooling, and processes. • Enable engineers through training, documentation, and hands-on guidance. • Create and maintain secure coding guidelines, checklists, and internal resources. • Act as a trusted security partner, not a blocker.