• Own quality end to end on a high-traffic PHP platform - from manual API validation to automated Playwright suites - making sure nothing slips through to production. • Analyse business requirements, functional specs, and user stories to design comprehensive test cases and scenarios. • Perform end-to-end testing of transaction lifecycles - from initiation and authorisation through to settlement and reconciliation. • Validate data accuracy and consistency across systems using SQL queries against relational databases. • Test REST APIs manually using tools like Postman to verify transaction requests and responses. • Log, track, and manage defects in Jira with clear reproduction steps, screenshots, and logs. • Run regression testing after deployments and proactively explore the platform for edge cases, risks, and performance issues.

Role Description Du testest gerne neue Apps aus, findest zuverlässig den Knopf, der nicht so reagiert wie er sollte, und hast Lust, Verantwortung zu übernehmen? Dann komm zu uns als Werkstudent im Bereich Qualitätssicherung. - Du nutzt unsere Software wie ein echter Kunde – und meldest, wenn etwas nicht rund läuft - Du dokumentierst gefundene Fehler klar und nachvollziehbar - Du arbeitest eng mit unserem Entwicklungsteam zusammen und siehst direkt, wie deine Hinweise umgesetzt werden - Du hilfst mit, neue Funktionen vor dem Launch auf Herz und Nieren zu prüfen Qualifications - Gutes Auge für Details und Lust, Dinge gründlich zu testen - Strukturierte, sorgfältige Arbeitsweise - Interesse an Software und digitalen Produkten – Vorerfahrung ist nicht nötig, wir bringen dir alles bei - Eingeschriebenes Studium Benefits - Moderner Tech Stack - Ownership und Vertrauen - 20 Tage Urlaub + Geburtstag sowie Weihnachten & Silvester frei - Motiviertes Team & leistungsstarkes Umfeld - 100% Remote - Team Events & Off Sites Company Description Wir sind HeroSoftware. Wir machen Software, die im Alltag wirklich einen Unterschied macht. Unsere Shopify-Apps werden von über 4.000 Kunden weltweit genutzt und unterstützen Shopify Händler beim Wachstum.

• Help develop and maintain quality processes for our software development team • Monitor quality metrics • Promote best practices in automation and testing strategy • Design, develop, and maintain robust automated testing solutions across our UI layers • Execute testing of new features and ensure their smooth integration into production environments • Help drive quality across the engineering organization

Role Description TrustedSec is seeking a passionate information security professional to join our Software Security Team. The Application Security Consultant/Penetration Tester will report to the Practice Lead and be responsible for assisting clients in their software security needs, including: - Conducting application security assessments to identify vulnerabilities - Delivering clear and actionable findings - Helping clients improve their overall security posture This is both a technical and client-facing role. The candidate should have experience in penetration testing and software development, capable of building direct client relationships while contributing to TrustedSec’s growing body of security knowledge. Requirements - The candidate must be legally authorized to work in the United States. TrustedSec cannot provide sponsorship or consider applicants located outside the United States. - This is a remote position, allowing employees to work from their home residence within the United States. Occasional travel to client sites or industry-related events is required. Duties/Responsibilities - Conduct high-quality software security assessments with limited direct supervision - Produce clear, technically accurate reports with testing walkthroughs, findings, and actionable recommendations for both technical and executive audiences - Conduct client meetings, serve as the primary point of contact, and interface directly with clients during engagements - Serve as a subject matter expert for other consultants/teams and regularly collaborate and contribute to furthering the education and progression of the skills and success of everyone at TrustedSec - Maintain and build upon cybersecurity knowledge and skills by attending educational workshops and adopting a curious, continuous learning mindset - Review publications, write blog posts, and potentially speak at conferences or other events Qualifications - 2+ years' recent experience testing web applications, thick clients, APIs, and web services - Proficiency in Burp Suite Professional - 2+ years' recent experience performing both unauthenticated and authenticated application testing - Advanced knowledge of manual application security testing, penetration testing methodologies, the OWASP Top 10, and the OWASP Testing Guide - Strong understanding of common security controls and vulnerability testing techniques - Passion for the Information Security industry, including keeping up to date with current software technologies, platforms, frameworks, and security issues - Good time management skills and the ability to meet strict deadlines - Demonstrated analytical and project management skills - Excellent verbal and written communication skills including active listening and competence in presenting findings and recommendations to audiences with a range of technical understanding - Ability to write technical documents with correct spelling, grammar, and punctuation and the ability to distill information for non-technical readers - Thrive in a fast-paced, collaborative environment - Ability to take initiative and work independently Desired Skills/Education/Experience - Familiarity with AI/LLMs/frontier models/agentic tools/coding assistants - Experience in mobile application testing - Ability to conduct source code reviews in multiple programming languages - Prior consulting experience - Industry-recognized security certification(s) such as OSWE, Burp Suite Certified Practitioner, OSCP, etc. - Programming/software development experience/DBA/sysadmin/etc. - Experience maintaining high levels of privacy and OpSec for clients, including government agencies Physical Requirements - Prolonged periods of sitting at a desk and working on a computer - Ability to lift 15 pounds at times - Travel up to 10% over the course of the calendar year - Must reside in the United States Salary Description Base compensation typically ranges from $80,000 - $150,000 and is determined by multiple factors such as geographic location, relevant experience, and demonstrated skills. In addition to base pay, we offer a generous paid time off allowance, paid holidays, and a performance pay bonus program.