About Us

At Onit Security, we're reimagining the future of security operations by harnessing cutting-edge AI to fundamentally transform how security teams work. Just as Cursor revolutionized engineering workflows, Onit Security is delivering that same step-change to security — bringing a powerful, agent-driven layer that acts as a digital extension of your team. Our platform cuts through the noise, prioritizes what truly matters, and enables your team to operate at 10x efficiency without adding headcount.

About the Role

We are seeking a detail-oriented QA Engineer to own both manual testing and test automation across our AI-powered security platform. You'll design and execute test plans, methodically validate complex workflows across a modern web application and its integrations, and build, extend, and maintain our end-to-end automation framework so quality scales with the product. You will collaborate closely with Product Management and Engineering to triage, prioritize, and hand off issues — ensuring every release meets our quality bar.

Responsibilities

Design and execute test plans and test cases for all product areas including function and management screens, AI workflows, and 3rd-party integration validation.
Perform thorough manual testing of new features, bug fixes, and regression scenarios across the web application and its backend services.
Build, extend, and maintain the end-to-end automation framework (Playwright / Agent) covering critical user journeys and high-value regression suites.
Define the automation strategy — decide what to automate vs. keep manual, and prioritize coverage where it reduces the most risk.
Integrate automated tests into CI/CD (GitHub Actions) so suites run reliably on every PR and release, and own the green/red signal.
Develop automated API tests to validate backend behavior and data pipelines independently of the UI.
Diagnose and stabilize flaky tests — improve reliability, parallelization, and execution speed; keep the suite trustworthy.
Test data-driven workflows such as connector data sync pipelines (external API → ingestion → deduplication → display).
Validate integrations end-to-end with third-party tools (e.g., Wiz, CrowdStrike, Jira), ensuring data accuracy, scheduled syncs, and data transformations.
File detailed, reproducible bug reports with clear steps, expected vs. actual behavior, severity, and supporting evidence (screenshots, logs, network traces).
Collaborate with Product Management on requirements, acceptance criteria, story refinement, and issue prioritization.
Work closely with Engineering to triage bugs, verify fixes, clarify reproduction steps, and ensure smooth QA→dev handoff.
Test AI/LLM features including chat conversations and AI agents — validating both functional correctness and response quality.
Maintain and organize the test case repository and automation codebase, keeping both up to date as the product evolves (positive, negative, edge, and boundary scenarios).

Requirements

4+ years of experience in QA / Software QA Engineering, with a meaningful portion in test automation.
Hands-on experience building and maintaining E2E automation frameworks — Playwright strongly preferred, including page object models, reusable fixtures, and test data setup/teardown.
Proficiency in TypeScript/JavaScript — our entire codebase (frontend and backend) is TypeScript, and automation is written in TS.
Experience integrating automated tests into CI/CD pipelines (GitHub Actions) and keeping them stable.
Proven experience writing structured test plans and test cases — for both feature testing and regression suites.
Strong experience testing modern web applications (SPA/React-based), including DOM inspection, network analysis, and browser dev tools.
Experience testing and automating REST APIs — comfortable validating backend behavior independent of the UI (e.g., Postman plus programmatic/automated API checks).
Experience testing integrations with third-party APIs/services — OAuth flows, webhooks, scheduled syncs, and data pipelines.
Comfortable with Git and code-review workflows — able to contribute automation code through pull requests.
Experience with bug tracking and project management tools (Jira) — skilled at writing clear, actionable bug reports.
Strong analytical and investigative mindset — root-cause analysis, distinguishing frontend vs. backend issues, and tracing data flow across systems.
Excellent communication skills — collaborates effectively with PMs and Engineers and advocates for quality.
Comfortable working with databases (SQL) for data validation and test verification.

Nice to Haves

Experience triaging non-deterministic / AI-driven test scenarios and evaluating streaming or conversational LLM outputs.
Visual regression and cross-browser testing experience.
Background in cybersecurity or vulnerability management — CVEs, CVSS scoring, vulnerability lifecycle, and security tooling (Wiz, CrowdStrike, Qualys, Rapid7).
Familiarity with ClickHouse, PostgreSQL, or similar databases for validating data-pipeline correctness and analytics queries.
Exposure to performance/load testing.

Senior QA Automation Engineer