QA, Security & Support Engineer, Mobile Digital Services

TrustNet Technologies is seeking a QA, Security & Support Engineer for a public workforce development agency’s cross-platform public-service app. The role owns testing, accessibility and security verification, monitoring, post-launch maintenance, and help desk service levels.

Responsibilities:

• Write and run the test plan: functional, usability support, accessibility, security, integration, and device testing across iOS, Android, and web
• Test to WCAG 2.1 AA and Section 508 with VoiceOver, TalkBack, scalable text, and contrast checks
• Run security testing (OWASP Mobile Top 10, vulnerability scans, penetration test coordination) and verify role-based access, encryption, audit logs, and consent records
• Test integrations, data flows, forms, scheduling, and SMS opt-in, opt-out, and two-way routing
• Track and resolve critical defects before production deployment and app store submission
• Document security controls, incident response, retention and deletion, and subcontractor access controls
• After launch: monitoring and alerting, OS and security updates, release cadence, help desk response times and SLAs, usage analytics, and continuous improvement
• Write support documentation and help train agency staff

Requirements:

• 4+ years in QA, application security, DevOps, or production support for mobile apps live on iOS and Android
• Mobile test automation with Appium, Detox, XCUITest, or Espresso; device clouds such as BrowserStack or Sauce Labs
• Accessibility testing experience with screen readers and automated tools (axe, Accessibility Scanner)
• Application security testing and knowledge of OWASP, encryption, and access controls
• Monitoring and support tools (e.g., Datadog, Sentry, Firebase Crashlytics, New Relic) and ticketing with SLAs (Jira Service Management, Zendesk, ServiceNow)
• Strong English communication
• Support of government, education, workforce, or human services systems
• Familiarity with privacy and consent rules for SMS (TCPA) and public-sector data
• ISTQB, Security+, CEH, CISSP, CPACC, or Trusted Tester certification