• This is a hands-on testing position which requires deep knowledge and understanding of all aspects of planning, developing and executing Front-end as well as Back-end Quality • Ensure a successful data conversion and implementation of CRM system, which includes CRM Integration Testing, Data Quality and Integrity testing, Usability (Functional and Performance) Testing etc. Be an advocate for Quality in their scrum team while driving and implementing best practices • Must poses strong analytical and critical thinking abilities • Must be motivated and self-driven • Responsible for planning and executing manual and automated testing activities on new and existing products to ensure that they meet the Business, Functional and Technical specifications and maintain high overall product quality • Interface with Product Owners, Business Analysts, Software Developers, End Users and Scrum Masters to deliver products with quality and on schedule • Review business requirements, functional specifications, use cases, design, and architecture documents in order to create effective, value-add test plans • Test and monitor the full ETL pipeline from source systems to CRM system to ensure integrity and accuracy of data has been maintained • Identify issues in data, application configurations and screen designs, report and oversee issue resolution • Become an expert in business rules, system functionality and CRM process and architecture • Develop and maintain best-in-class regression automation test suite • Independently develop, modify, and execute test plans based on requirements and design documents • Provide estimates and timeframe necessary for testing a project to ensure a high-quality implementation • Provide concise and consistent status reporting • Collaborate with external teams on root cause analysis, identify, track and report defects • Maintain close interaction with business and technical peers during the project life cycle • Ensuring proper traceability from requirements to test artifacts • Actively participate in requirements and code reviews, drive improvements in scrum delivery • Stay ahead of emerging technologies and testing approaches • Assist leadership with defining and improving the overall QA and SDLC process

• Develop, maintain, and improve manual and automated test cases for NIRIS baselines • Execute functional, regression, integration, system, and release testing • Build, maintain, and refactor automated test scripts using frameworks such as Robot Framework, Playwright, Selenium, or Cypress • Support test automation frameworks within the NATO Software Factory (Azure DevOps / GitLab CI/CD) • Perform interface and interoperability testing for tactical data links and external systems (Link 16, JREAP, OTH-Gold, DIS, VMF, AIS, CESMO, etc.) • Prepare test data and support test-event preparation (e.g., CWIX, customer visits) • Log, track, retest, and verify defects using Jira / Zephyr or equivalent • Produce and maintain test documentation: test plans, test cases, execution reports, regression reports, release readiness inputs • Participate in Agile ceremonies (sprint planning, daily stand-ups, sprint reviews, retrospectives) • Provide test evidence, KPIs, and release recommendations to support acceptance and governance decisions • Proactively identify risks, blockers, dependencies, and process improvements

Role Description As a senior member of the Figment Security Team, you'll plan and run full-scope adversary emulation across all of Figment's products and platforms, from conventional cloud and application infrastructure to build pipelines and crypto systems. You'll own engagements end-to-end: evaluating environments to find vulnerabilities, building the attack scenarios to prove them out, and seeing your findings drive real fixes. This role is as much about partnership as it is about offense. You'll work directly with stakeholders and the blue team to communicate findings clearly, recommend practical mitigations, and help strengthen our overall security posture. How you will make an impact - Plan and execute red team engagements, pentests, and ad-hoc assessments against cloud, development pipelines, web and application layers, source code, and more. - Apply attacker tactics, techniques, and procedures safely within Figment environments, including detection-evasion work. - Produce clear reports and presentations tailored to both technical and executive audiences. - Partner with stakeholders, including technical staff, leadership, and legal counsel, to translate findings into risk-appropriate, actionable recommendations. - Collaborate with the blue team to suggest mitigations, validate fixes, and improve defensive coverage. - Mentor blue team members and lead cross-team exercises such as purple teaming. - Support incident response with offensive security technical expertise and contribute to post-incident action plans. - Build and improve red team tooling, scripts, infrastructure, methodologies, and documentation. Qualifications - Experience with and strong understanding of cloud platforms, CI/CD pipelines, and supply chains. - Demonstrated use of AI tools to accelerate offensive work (LLM-assisted code review, payload generation, recon, report drafting), with sound judgment about where they help versus where manual testing is required. - Offensive expertise in container orchestration: attacking and escaping Docker and Kubernetes (container breakout, RBAC abuse, misconfiguration exploitation). - Experience performing API and web application assessments. - Experience performing source code review for security flaws. - Experience building automations that chain red team tooling together, cutting manual effort across recon, exploitation, and reporting. - Strong written and verbal communication conveying findings, risk, and remediation to engineers, stakeholders, and executives. Bonus if you have - Industry certifications such as OSCP/OSCE, OSEP, OSWE, GPEN, GCPN, GWAPT, or GXPN. - Solid understanding and experience working with GitHub and GitHub Actions. - Programming skills as well as the ability to read and assess applications written in multiple languages such as Go, Rust, and Ruby. - Understanding of security risks for blockchain and crypto. Benefits - 100% remote-first environment. - 4 weeks of PTO that kick in day one, with an additional 1 week of flex days. - Extended company-paid health benefits that kick in day one. - Best-in-class parental leave and flexible arrangements. - A home office stipend to create a space that you enjoy working in. - Monthly Wi-Fi reimbursement. - A yearly Learning & Development budget. - 401K (US) or RRSP match (Canada). - Stock Options in the company. - Annual on-site company gatherings and retreats to inspire team bonding, collaboration, and fun! Compensation - The US base salary range for this position is USD $165,000 - $180,000. - The CAD base salary range for this position is CAD $165,000 - $180,000. - This range reflects base salary only, and does not include additional compensation, sales incentives or benefits. Interview process - During your first Recruiter Call, you will be provided with more information about Figment, the position and what to expect for the rest of the interview process. - We aim for the entire process to take around 2–4 weeks from initial screen to offer.

• Develop and enforce quality standards and goals across our software systems, services, and applications. • Design, build, and maintain an efficient automated testing environment while continuously educating the software engineering team on best practices. • Collaborate closely with Software Engineers, System Architects, Organizational Developer, UI/UX Designers, and product owners to deliver a high-quality product. • Advocate for a strong testing mindset throughout the organization to ensure quality remains a top priority. • Work with the support team to assess, evaluate, and prioritize incoming issues based on their severity and potential impact.