• Ejecutar pruebas funcionales, de regresión, usabilidad, integración y compatibilidad en aplicaciones web. • Validar escenarios cross-browser y responsive en distintos navegadores y dispositivos. • Realizar API Testing sobre servicios REST utilizando herramientas como Postman. • Identificar, reportar y dar seguimiento a defectos utilizando Jira, asegurando una correcta trazabilidad y comunicación con el equipo de desarrollo. • Diseñar, ejecutar y mantener casos de prueba detallados, escenarios de prueba y matrices de trazabilidad basadas en criterios de aceptación. • Participar activamente en ceremonias ágiles y colaborar en la resolución de bloqueos y mejoras de calidad.

• Plan and execute penetration testing activities across web applications, APIs, mobile applications, internal and external infrastructure, and AWS cloud environments • Perform offensive security exercises, including red team and assumed-breach scenarios covering privilege escalation, lateral movement, persistence, and data exfiltration • Assess the security of cloud-native services, Kubernetes environments, microservices, and CI/CD pipelines • Identify vulnerabilities affecting payment systems, wallets, KYC/AML processes, bonus mechanisms, affiliate tracking, and other business-critical workflows • Work with Product, Engineering, AppSec, Payments, and Fraud teams to prioritize findings and support remediation efforts • Develop custom scripts and internal tools to improve testing capabilities where standard solutions are insufficient • Contribute to threat modeling activities and support secure-by-design initiatives • Review penetration testing plans, reports, and provide technical guidance to junior and middle security specialists • Research emerging vulnerabilities, MITRE ATT&CK techniques, security advisories, and translate them into actionable improvements • Support security assessments for new products, releases, and market launches, including effort estimation and pre-certification activities • Act as a security advisor for technical and business stakeholders on offensive security matters

• Assists IT Quality Assurance in ensuring internal and external customers' requirements • Verifying product functionality and performance against product requirements and specifications • Executes and tracks testing performed on assigned products, including new products and modifications to existing systems • Performs evaluations and audits of software documentation and software processes associated with products under test • Establishment and maintenance of structured testing methodology and environments

• Validate AI-reformatted procedures against original source documents, ensuring no steps, warnings, cautions, notes, references, or supporting content have been omitted or altered • Confirm that reformatted SOPs follow the HPOG Best Practice in Procedure Formatting standard, including structure, numbering, conditional logic, layout, and human-factors principles • Identify and clearly flag content that has been paraphrased, reordered, truncated, duplicated, or unintentionally changed during AI processing • Assess each reformatted procedure for readability and practical usability from the perspective of a field operator or technician • Verify that AI-generated compliance flags are accurate, relevant, and correctly mapped to the applicable regulation, standard, or recommended practice • Evaluate AI-generated revisions to confirm they are technically sound, operationally appropriate, and consistent with the intent of the source requirement • Review corporate standards and policies against frameworks such as AER Directives, OGC requirements, API Recommended Practices, OSHA PSM under 29 CFR 1910.119, CAPP guidelines, and relevant environmental legislation • Cross-reference new and revised documents against the client's internal policy and standards library to identify conflicts, gaps, or inconsistencies • Record precise, actionable defects with clear references to the affected source and output locations, then verify corrections through regression testing • Partner with product and engineering teams to explain domain context, track recurring error patterns, and improve the platform's document-processing and compliance models