Senior QA Engineer

Corsha Inc.•Tysons, VA

4d•$150,000 - $190,000•Hybrid

About The Position

At Corsha, we are fundamentally reshaping how the most critical industrial and operational technology (OT) systems are secured. We are a cyber startup in the DC area, driven by a mission to bring trust, resilience, and identity to the operational systems that power our world – from factories to power grids. We are building the future of machine identity security, and we need a tenacious quality engineer to join our front lines. If you are an engineer who takes personal stake in improving product quality, thrives in a fast-paced environment, and has a passion for building robust testing frameworks, then read on. We move fast, we build for impact, and we need a strategic, data-driven thinker to help us ensure our solutions are reliable and production-ready for the machines that matter most.

Requirements

Bachelor's degree in Computer Science, Engineering, or a related technical field, or equivalent practical experience.
5+ years of intense, hands-on experience architecting test automation frameworks and validating complex backend/infrastructure environments within fast-paced, high-stakes engineering teams.
A demonstrable expertise in architecting and implementing comprehensive test strategies, including the ability to craft a detailed test plan for a new feature that anticipates failure modes and ensures a robust release.
Practical experience architecting test suites in Python, Go, or TypeScript/JavaScript using major testing frameworks (e.g., PyTest, Playwright, Cypress, or similar), alongside the wisdom to know how to structure scalable automation suites.
A solid foundation in modern CI/CD pipelines (e.g., Jenkins, GitHub Actions) and orchestration tools (Docker, Kubernetes), with the hands-on capability to build seamless integrations between your automation suites and the deployment workflow.
High comfort using command-line interfaces to execute backend system commands, analyze network traffic/gatekeepers, and validate access control proxies.
A rock-solid understanding of API authentication methods (JWTs, certificates, Basic auth) and the diagnostic skills to troubleshoot and resolve connectivity issues with surgical precision.
An empathetic understanding of operational technology (OT) environments, their unique security challenges, and how to test systems operating within this critical domain.
Deep experience utilizing industry-standard test case management systems (TCM) for authoring clean test cases up front, along with a strong familiarity with enterprise Agile defect tracking and workflow management platforms.
Exceptional communication and collaboration skills, with a commitment to writing clear, comprehensive documentation that enables others to build upon your work.

Nice To Haves

Experience with a variety of testing concepts, including End-to-End, Performance, Chaos, and Fuzz testing, demonstrating a comprehensive approach to quality assurance.
Familiarity with Helm and Go.
Knowledge of PKI, Certificates, and mutualTLS.
Experience testing with systems that support both on-prem and cloud environments.
Hands-on experience testing on real hardware, bare metal, or distributed ICS testbeds and digital twins designed to replicate physical industrial environments.

Responsibilities

Design and Implement Testing Strategies: Develop clear testing strategies aligned with platform goals and drive them through to execution. Design methods for automated tests across a variety of scenarios, including backend APIs, proxy traffic configurations, Docker-based deployments, and frontend performance.
Build and Maintain Frameworks: Run and deliver reports on the current automation infrastructure, and become a code owner, taking a personal stake in the continuous improvement and maintenance of both backend and frontend frameworks.
Integrate Systems & Tools: Optimize engineering feedback loops by building seamless integrations between our automated testing suites, CI/CD pipelines, and external platform tools.
Leverage AI for Quality: Research and evaluate AI/LLM-assisted developer tools to accelerate testing workflows—focusing on automated test case generation, prompt engineering for edge-case coverage, and optimizing framework code maintenance.
Automate Test Execution: Automate the execution of test suites for release candidates and ensure that automated test failures capture the full system state required to reproduce the failure.
Validate Platform Security & Traffic: Execute backend system commands and analyze network traffic to validate identity gatekeeper mechanisms, access control proxies, and real-world operational environments.
Troubleshoot and Resolve: Dive deep into failing automated tests to diagnose root causes and write the code necessary to fix them, actively eliminating flaky tests to ensure highly stable and repeatable test results.
Meticulous Test Case Design: An intense attention to detail with the ability to proactively partner with functional owners and developers up front to master upcoming features, translating complex capabilities into clean, comprehensive manual and automated test cases within enterprise test case management systems.