Tester (QA / Security / 508) + Business Analyst

We are a federal IT company on a mission to make customer experience (CX) the center of every government solution.

Technology is our Passion. People are our Purpose. 

We know tech, but we love people. NuAxis is home to thinkers and feelers; engineers and artists. We work hard and support each other along the way. Teamwork is more than just a buzzword for us, it’s a state of mind. 

We believe happy employees do amazing work, so join our team NOW! We are currently seeking a talented and motivatedTester (QA / Security / 508) + Business Analystfor a Full-Time position.

Role Summary

A hybrid quality assurance and business analysis role on an Agile delivery team modernizing WHD’s legacy .NET applications (Workers Owed Wages, External User Portal, Section 14(c), FLC Online, DirectoryAdmin) to Drupal 10+ on DOL’s PACE containerized AWS platform, and building new public-facing portals for wage determination surveys and online complaint intake. The role owns the path from requirements elicitation to accepted, release-ready functionality, including functional, security, and Section 508 test evidence required for every production release.

Key Responsibilities

•     Facilitate requirements elicitation with WHD Product Owners, SMEs, and OCIO stakeholders; decompose needs into Jira epics, features, and user stories with clear, testable acceptance criteria.

•     Document and maintain process flows, use cases, wireframe annotations, and requirements traceability in Jira and Confluence.

•     Develop sprint- and release-level test plans, test cases, and test scripts; execute functional, integration, regression, and user acceptance testing support.

•     Test Drupal Webform-based forms and integrations with Login.gov, WISE/CAPS on Appian, SharePoint, and Kafka, including real-time inline validation, one-time submission rules, bilingual (English/Spanish) content, and audit logging.

•     Perform Section 508 / WCAG AA conformance testing using the DHS Trusted Tester methodology and DOL-approved tools (ANDI, NVDA, JAWS, Compliance Sheriff), including keyboard operability and assistive technology compatibility.

•     Conduct application security testing in support of DevSecOps and the ATO: validate OWASP Top 10 protections (XSS, CSRF, SQL injection), review scan results, and verify remediation of STIG and SRR findings.

•     Support OCIO security test and evaluation activities and assessment teams during system security testing.

•     Log, categorize, and trace defects per OCIO categories with full linkage (Roadmap → User Story → Task → Defect); deliver end-to-end defect reports at the close of every test cycle.

•     Assemble release-readiness evidence: Section 508, mobile/tablet, security, and functional test reports, with no open in-sprint defects.

•     Participate in all Agile/SAFe ceremonies, including sprint planning, daily stand-ups, reviews, and retrospectives.

Required Qualifications

•     Bachelor’s degree in Computer Science, Information Systems, Business, or a related field (or equivalent experience).

•     5+ years of combined software quality assurance and business analysis experience, including 3+ years in federal Agile/SAFe environments.

•     Current DHS Trusted Tester certification (verification of Section 508 knowledge is required for contract personnel).

•     Hands-on experience writing user stories, acceptance criteria, and test cases in Jira and Confluence (Xray, Zephyr, or similar).

•     Working knowledge of web application security testing (OWASP Top 10) and NIST SP 800-53 / ATO support activities.

•     Experience testing public-facing web portals and forms, including REST API testing with Postman or similar tools.

•     Strong written communication and stakeholder facilitation skills.

•     U.S. person; must obtain and maintain a favorable NACI / HSPD-12 background investigation.

Preferred Qualifications

•     Experience testing Drupal 10+ applications, Appian integrations, or Login.gov authentication flows.

•     Exposure to test automation (Cypress, Playwright, or Selenium).

•     Certifications such as CBAP/CCBA, ISTQB, CSM/CSPO, SAFe, or CompTIA Security+.

•     Prior support of DOL or another federal enforcement or regulatory agency.

•     Experience using DOL-approved AI tools (e.g., Microsoft Copilot) to accelerate requirements and test case development.

Does this opportunity sound like a fit for you? If so, join our talent community and click to apply now!!

Our Profile: 

We are an IT company with a unique mission—to make people the center of every federal IT solution. Our technologists have always gone the extra mile to help our federal clients succeed. And over the years, we saw a growing disconnect in how federal IT initiatives were built and managed. Time after time, programs failed because the focus was on the tools and products and not the people using them.  Learn More.

NuAxis is an Equal Opportunity Employer. Employment is contingent upon successful completion of a background investigation. Learn More about our Benefits and Culture!

#NAI #DICE