Source description
About the role
Company Description Right-Hand Cybersecurity is building the next generation of Human Risk Management. We help enterprises understand and reduce workforce-related cybersecurity risk through intelligent security awareness, phishing simulations, AI-powered agents, behavioral insights, and risk analytics. We are a lean, product-driven team building for complex enterprise environments. Engineers work closely with product, design, customers, and company leadershipand have meaningful influence over what we build and how we build it. The daily fulfillment of this mission would not be possible without the cornerstone of Right-Hands business - its people. We firmly believe that if we take care of our employees, they will take care of our customers, and the rest will work itself out. The founding team at Right-Hand has created a culture that evangelises six core values: Resilience: We solve problems and overcome challenges to the best of our ability, regardless of how daunting they may appear. Empathy: We listen to and understand the perspective of others, including our peers, customers, partners and investors. Passion: We care deeply about our work, our customers, each other and this company. Accountability: We trust each other to get our job done at a high level. Transparency: We act and communicate openly, honestly, and effectively to drive toward positive outcomes. Authenticity: We understand who we are and will surround ourselves with a diverse group of people who complement our skillset and share our values. If you want to join this mission-driven team and believe you fit the profile below, lets talk! About the role We are looking for a Quality Automation Engineernot a traditional QA gatekeeper. You will build the systems, automation, and feedback loops that help the entire engineering team ship reliable software quickly. Developers will continue to own the quality of what they build; your responsibility is to make effective testing easy, fast, visible, and integrated throughout the development lifecycle. You will work alongside product engineers from early discovery and architecture through production release. You should be comfortable reading application code, challenging requirements, designing automation frameworks, investigating failures across services, and preventing defects rather than only detecting them before release. This is a hands-on engineering role with meaningful influence over our release process and quality architecture. What you will do Own our quality automation strategy - Define a risk-based automation strategy across frontend, backend, integrations, data workflows, and AI-powered features. - Determine which behaviors should be covered through unit, component, API, contract, integration, end-to-end, performance, or production-level testing. - Ensure critical customer workflows are protected without creating a slow or excessively brittle test suite. - Establish clear quality standards and release-readiness criteria. Build scalable test automation - Design and maintain automation frameworks for our React applications, Rails platform, APIs, and supporting services. - Build reliable end-to-end automation using Playwright or an equivalent modern framework. - Develop API, database, integration, and service-level tests that identify failures earlier than UI tests. - Introduce contract testing for important internal and third-party service boundaries. - Automate regression coverage for enterprise workflows, permissions, multi-tenancy, configuration, reporting, and integrations. - Build reusable test-data factories, fixtures, mocks, and isolated test environments. - Add performance, load, concurrency, and resilience testing for high-risk workflows. Integrate quality into CI/CD - Integrate automated tests into pull-request, staging, and release pipelines. - Define practical quality gates based on risk, coverage, test results, and affected product areas. - Optimize suites through parallelization, sharding, test selection, and appropriate separation of fast and extended tests. - Keep pull-request feedback fast enough that engineers trust and use it. - Identify, quarantine, investigate, and eliminate flaky tests. - Ensure failures provide actionable diagnostic information rather than generic pipeline errors. - Automatically connect production defects to permanent regression coverage. Test security-sensitive workflows - Build automated regression coverage for authentication, authorization, tenant isolation, role permissions, and sensitive-data access. - Test negative and abuse scenarios, including cross-tenant access attempts and unauthorized API behavior. - Partner with engineering and security teams to incorporate security regression tests into the delivery pipeline. - Validate auditability, data integrity, and critical compliance-related behaviors. - Help ensure quality automation supportsnot bypassesour security and SDLC controls. Establish AI and agent quality Company Des
More at Right-Hand Cybersecurity