Senior SDET, API / Security
Keeper Security6 months ago
Remote, United StatesSenior
Responsibilities
- Lead the design, architecture, and implementation of scalable automated test frameworks for RESTful and GraphQL APIs across distributed and microservice-based systems
- Define advanced API validation strategies covering authentication, authorization, rate limiting, and error handling
- Conduct security-focused testing such as token validation, input fuzzing, and access control verification
- Integrate automated API and security test suites into CI/CD pipelines and maintain coverage across staging and production-like environments
- Collaborate with developers to validate API contracts and backward compatibility
- Lead testing of secure integrations with third-party services and identity providers
- Analyze test failures and production incidents to improve test coverage and reliability
- Mentor automation engineers and contribute to automation architecture and roadmap planning
Requirements
- At least five years of QA automation experience focused on API testing
- Proficiency with Postman, REST Assured, or similar API testing frameworks
- Scripting experience in Python or JavaScript
- Required hands-on experience developing automated tests with Pytest; Jest experience preferred
- Familiarity with OAuth2, JWT, API keys, and other authentication methods
- Understanding of common API vulnerabilities, including the OWASP API Top 10, and how to test for them
- Experience integrating automated tests into a GitHub Actions CI/CD pipeline
- Strong understanding of HTTP, JSON, and common API protocols
- ECC and RSA encryption knowledge is desirable
- Strong communication and collaboration skills
- Experience with security-focused testing tools such as Burp Suite or OWASP ZAP is preferred
- Exposure to SOC 2, ISO 27001, or FedRAMP security compliance frameworks is preferred
- Familiarity with AWS API Gateway, Lambda, and Secrets Manager is preferred
- Background in API performance or load testing is preferred
Benefits
- Medical, dental, and vision insurance, including domestic partnerships
- Employer-paid life insurance and supplemental life insurance for employees, spouses, and children
- Voluntary short-term and long-term disability insurance
- 401(k) with Roth and traditional options
- Generous paid time off, including paid bereavement and jury duty leave
- 100% remote position, with a hybrid schedule available for candidates based in El Dorado Hills, California
Tech Stack
About Keeper Security
Keeper Security builds a cloud-based, zero-knowledge platform for password management, secrets management, privileged access management and secure remote connections for individuals and organizations. The privately held company, founded in 2011 and headquartered in Chicago, sells its KeeperPAM suite as subscription software, is published in 23 languages and sold in over 150 countries, and supports integrations with common identity providers and enterprise tech stacks.