Vulnerability Research Jobs in Colorado (NOW HIRING)

Title Software Security Test Automation Engineer

Department R&D

Location Niwot, CO (Hybrid)

ReportsTo Software Test Manager

Your Impact

We are looking for aSoftware Security Test Automation Engineerwho will contribute to the success of theR&DTeam, applying theirexpertiseinSoftware Testing and Securityto support the achievement of team and company goals and deliver innovative, reliable solutions.In this role, the successful candidate will collaborate effectively with colleagues and cross-functional teams,demonstratestrong problem-solving and decision-making skills, andmaintaina commitment to professional excellence,qualityand continuous improvement.

The Role

As aSoftware Security Test Automation Engineer,you'llbe working on a team of highly skilled Software Test Engineers to test application software and embedded firmware on complex facility management systems and instruments throughout the product lifecycle. You will take care of the preparation and execution of the tests necessary to verify the compliance of the software related cyber security. The ideal candidate has experience in software security testing and vulnerability assessment activities, with the ability to identify, analyze and document security weaknesses in software applications and systems.

Job Responsibilities

• Participate in and contribute to the entire software development life cycle process.
• Execution of Security Assessments:
  • Vulnerability assessments: perform the assessment.
  • Penetration testing: manual and automated test.
  • Threat Modeling: conduct threat modeling to identify potential security threats, assess risks, and define appropriate mitigation strategies.
  • SAST/DAST analysis: to analysis, validate and triage and with developers and cyber security team the findings.
  • Vulnerability validation and security reporting: to ensure compliance with cybersecurity requirements.
  • Planning and implementation of testing strategies: Define detailed plans to test the various functionalities of the software for cyber security side.

• Review system requirements and use cases with software developers and other technical team members.

• Develop,documentand execute detailed test scripts, both manual and automated, to cover software/firmware functionality and ensure traceability to requirements.

• Research issues, create test reports that detail testing results and solutions, trackdefectsand verify bug fixesin a timely manner.

• Design and develop reliable,scalableand maintainable test automation frameworks with Java/Python.

• Implement andmaintainautomation scripts for webapplicationusing Java/Selenide/Junit.

• Collaborate with Developer and QA team to contribute to Git repositories and perform peer code reviews.

• Document test processes and peer review documentation for clarity and precision; develop andmaintainQA guidelines.

• Integrate test automation scripts into the CI/CD pipeline with Jenkins.

• Recommend and implement automated test tools and strategies.

• Share automation-related knowledge and best practices, and train other testers on test execution.
• This job description is not intended to beall-inclusive.Responsibilities may evolve over time, and other related duties may be assigned to meet the ongoing needs of the company.

Required Qualifications

• A BS degree in Computer Science, Software Engineering, or equivalent.

• At least 5 years' experience as an Automation Software Test Engineer developing and executing automation software/firmware test scripts,testingand tracking defects.
• Security Testing and Vulnerability Assessment: Experience in identifying, validating and documenting software vulnerabilities and security risks.
• Manual and Tool-Based Penetration Testing: Ability to perform security assessments using both manual techniques and industry-standard penetration testing tools.
• Static and Dynamic Application Security Testing (SAST/DAST): Experience using source code analysis and dynamic testing methodologies to identify security vulnerabilities throughout the software development lifecycle.
• Vulnerability Risk Assessment: Knowledge of CVSS (Common Vulnerability Scoring System) methodology for vulnerability classification, prioritization and risk evaluation.
• Secure Development Lifecycle: Understanding of security integration within Agile, DevSecOps and CI/CD environments.
• Security Reporting: Ability to produce clear technical reports detailing findings, risk levels, remediation recommendations and validation results.

• Expertise ontest-driven development, developingdifferent levelsof automated tests, such as functionaltest, integrationtest, systemtest, or performancetest.

• Experience in Web application automation using Selenium/Selenide.

• Working experience with IntelliJ or other IDE's, as well as Java, Python, C#.

• Working experience withRanorexStudio.

• Strong analytical and problem-solving skills, with strong attention to detail.

• Clear oral and written communication skills, especially technical writing.

• Self-starter and capable of working effectively with minimal supervision.

Preferred Qualifications

• Knowledge of public security advisories, CVE databases and vulnerability disclosure processes.
• Experience reviewing and understanding public CTF (Capture The Flag) writeups and security research publications.
• Familiarity with the MITRE ATT&CK framework and adversarial techniques.
• Security certifications such as OSCP (Offensive Security Certified Professional), CEH (Certified Ethical Hacker), GPEN (GIAC Penetration Tester) or equivalent certifications.
• Experience with common security testing tools such as Burp Suite, OWASP ZAP, Nessus, Nmap, Metasploit or similar.
• Experience working within an Agile Development Environment is preferred.

• Knowledge of Jira, Jama, and Confluence is preferred.

• Working knowledge of generative AI tools such as Copilot for software development or testing is preferred.

Work Environment & Physical Requirements

• This role primarilyoperatesin an office/lab/manufacturing environment.

• Mustbe able to sit, stand, and use a computer for extended periods of time.

• This is a hybrid position, "in-office"minimum 3 days per week.

• Occasional lifting of up to20lbs.may berequired.

• Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of this role.

Compensation & Benefits

• Competitive base salary range:$90000 - 120000

• Our compensation philosophy:we offer competitive pay based on market data, including local, national, and industry benchmarks.For new hires, offers aregenerally withinthe established min- to mid-point of the range for the role, with flexibility to recognize experience, skills, and education.Our approach ensures fair pay internally whileremainingcompetitive externally and allows room for growth.

• Comprehensive benefits package:

• Health coverage: medical, dental, vision,fsa, onsite clinic (CO employees), life insurance

• 401(k) retirement plan with company match

• Vacation, holiday, and leave policies

• Tuition reimbursement, Employee recognition programs, Employeeassistanceprograms

Particle Measuring Systems is proud to be an Equal Opportunity Employer and are committed to building an inclusive and supportive workplace where everyone can thrive.