YOUR NEXT CHAPTER
Senior QA / Test Engineer - 12 Weeks
About the role
• Design and lead adversarial security testing of the deterministic decision path
• Attempt to defeat default-DENY, escalate privileges, or cross tenant boundaries
• Test multi-tenant isolation and owner-versus-customer scoping using tenant-scoped identities
• Verify tamper-resistance of the hash-chained audit trail, including append-only behavior, hash-chain linkage, and mutation detection
• Validate authentication and authorization across tenant and operator roles
• Review and extend per-module freeze-audit self-tests
• Ensure governance rules resolve through the live intake path to a real engine record
• Rank findings by severity and provide reproduction steps in GitHub Issues
• Keep findings aligned with the freeze-audit CI gate
• Enforce the merge gate requiring green freeze-audit CI
• Partner with the client on architectural sign-off for governance-core changes
• Deliver an adversarial test suite, independent audit-chain verification, severity-ranked findings, and a clean defect flow within the first 12 weeks
• Strong security-testing background, including penetration testing, authorization/access-control testing, or security QA
• Hands-on experience with Python and comfort reading a real codebase to design tests
• Experience with multi-tenant SaaS and tenant isolation failure modes
• Practical understanding of cryptographic audit trails, hash chaining, and tamper-evidence
• Experience with Docker and CI-based workflows, including GitHub Actions or equivalent
• Ability to work against a green-CI merge gate
• Proficiency with Postgres for validating durable state and persistence
• Clear written English
• Strong ability to produce rigorous, reproducible defect reports
• Experience testing policy engines, authorization systems, or agentic-AI guardrails
• Exposure to SOC 2 controls and evidence expectations
• Familiarity with Render or comparable container hosting
• Background working in a regulated or safety-critical domain
• Placed in a product-based company and treated like a full-time team member
• Full back-office support: career guidance, HR, and concierge services
• Remote-first policy
• Company-provided MacBook (no BYOD)
• Tech talks, chapter meetings, and a strong community of top engineers
• Free English lessons with a native English speaker
• Referral bonus for recommending new Ubiminders
• Access to the Florianópolis HQ with snacks, massages, drinks, and games