• Leading software assurance activities throughout medical device software life cycle • Creating software quality assurance plan • Determining software safety classification • Software test readiness and software release readiness • Ensuring traceability upwards to system level requirements and safety/security risk controls as well as downwards to software design, implementation and testing • Being an active member of the software team during the whole software life cycle • Responsibility for physical and functional configuration audits • Reviewing and approving software requirements, software architectural and detailed design, test procedures, test logs, test results • Providing insight to management regarding software project status and software quality metrics • Ensuring compliance with applicable regulatory requirements and industry standards • Performing gap assessments • Immediately elevating to management any major problem with device software that could affect patient safety, cyber security, customer usability or system adherence to process requirements • Acting as a quality champion in software product development and testing teams • Supporting other software related processes such as CAPA process and other quality related processes regarding cybersecurity risk management and software quality assurance.

• Lead quality assurance activities portfolio wide • Establishing and executing a comprehensive test strategy • Performing functional, regression, and integration testing • Managing defect tracking and enforce quality gates prior to release • Standardizing Documentation • Supporting audit and compliance requirements • Reducing production defects and incident volumes • Supporting Future Modernization Initiatives

• Test SEPA credit transfer flows, SWIFT MT / ISO 20022 message flows, and Visa card payment flows including 3DS2 authentication. • Perform API , contract, schema, and integration testing at the microservice layer, including async / event-driven workflow testing across queues, retries, and DLQ. • Execute structured test scenarios across SEPA , SWIFT , and Visa payment workstreams and validate end-to-end transaction lifecycle flows, reconciliation, settlement, and data consistency. • Conduct resilience testing including retries , circuit breakers , DLQ , failover, and idempotency validation, as well as performance, load, and stress testing for platform stability. • Develop, execute, and integrate automated test suites into CI/CD pipelines. • Produce audit-grade test evidence and traceability documentation for PCI DSS compliance. • Validate web, mobile, and cross-platform functional consistency and regression coverage. • Collaborate with developers, DevOps , and security teams to identify, track, and verify defect resolution.

Role Description SIXGEN supports cyber and intelligence missions by serving government and commercial organizations as they overcome global cybersecurity challenges. You’ll work with our highly skilled operators conducting research and assessments based on real-world threats. You’ll simulate adversaries and malicious actors and report details and actionable findings on critical assets and infrastructures. Using innovative processes, tools, and techniques, you’ll predict and overcome cybersecurity vulnerabilities. What You’ll Do - Simulate real-world cyberattacks to assess and challenge the effectiveness of security controls and incident response capabilities. - Conduct reconnaissance, exploitation, and post-exploitation activities using adversary tactics, techniques, and procedures (TTPs). - Develop and use custom tools and methods to evade detection and maintain stealth during engagements. - Document findings and deliver clear, actionable reports to technical and executive stakeholders. Qualifications - Experience performing OSINT/reconnaissance, enumeration, web application testing, social engineering, payload development, initial access, system enumeration, lateral movement, privilege escalation, data exfiltration. - Participates in report writing process and can professionally convey findings and impact to customers, both written and verbally. - Practical offensive certification: CRTO, OSCP, CPTS, or similar. - At least 2 years of independently executing complete red team engagements, from planning through post-exploitation. - At least 2 years modifying/red-teaming tools (e.g., Cobalt Strike, Kali) and 2+ years developing payloads to bypass A/V and EDR defenses. - Experience performing engagements on cloud, hybrid, multi- and/or single-tenant active directory environments such as AWS, GCP, Entra. - In-depth knowledge and experience with Windows and *NIX-based operating systems, networking concepts, and Active Directory. Requirements - Clearance Requirements: None, but Public Trust preferred. - Travel: Up to 10%. Benefits - Employer-paid health insurance premiums (medical, dental, vision) for you and your family. - Employer-paid short/long term disability insurance and basic life/AD&D insurance. - 401K with a 4% employer contribution. - Professional development reimbursement options available (training, certification, education, etc). - Flexible and remote work policies for most positions. - Flexible PTO and holiday schedule. Company Description SIXGEN’s mission is to deliver agile, mission-ready cybersecurity solutions that empower government and critical infrastructure organizations to stay ahead of advanced cyber threats. We combine innovation, deep expertise, and cutting-edge capabilities to uncover vulnerabilities, protect vital systems, and ensure operational superiority in an ever-evolving digital landscape.