Tester (QA / Security / 508) + Business Analyst

NuAxis Innovations is hiring a Tester (QA / Security / 508) + Business Analyst to support modernization of WHD legacy applications and development of public-facing portals. The role spans requirements analysis, quality assurance, security testing, and Section 508 validation, delivering accepted, release-ready functionality for DOL’s PACE platform.

Responsibilities:

• Facilitate requirements elicitation with WHD Product Owners, SMEs, and OCIO stakeholders; decompose needs into Jira epics, features, and user stories with clear, testable acceptance criteria
• Document and maintain process flows, use cases, wireframe annotations, and requirements traceability in Jira and Confluence
• Develop sprint- and release-level test plans, test cases, and test scripts; execute functional, integration, regression, and user acceptance testing support
• Test Drupal Webform-based forms and integrations with Login.gov, WISE/CAPS on Appian, SharePoint, and Kafka, including real-time inline validation, one-time submission rules, bilingual (English/Spanish) content, and audit logging
• Perform Section 508 / WCAG AA conformance testing using the DHS Trusted Tester methodology and DOL-approved tools (ANDI, NVDA, JAWS, Compliance Sheriff), including keyboard operability and assistive technology compatibility
• Conduct application security testing in support of DevSecOps and the ATO: validate OWASP Top 10 protections (XSS, CSRF, SQL injection), review scan results, and verify remediation of STIG and SRR findings
• Support OCIO security test and evaluation activities and assessment teams during system security testing
• Log, categorize, and trace defects per OCIO categories with full linkage (Roadmap → User Story → Task → Defect); deliver end-to-end defect reports at the close of every test cycle
• Assemble release-readiness evidence: Section 508, mobile/tablet, security, and functional test reports, with no open in-sprint defects
• Participate in all Agile/SAFe ceremonies, including sprint planning, daily stand-ups, reviews, and retrospectives

Requirements:

• Bachelor's degree in Computer Science, Information Systems, Business, or a related field (or equivalent experience)
• 5+ years of combined software quality assurance and business analysis experience, including 3+ years in federal Agile/SAFe environments
• Current DHS Trusted Tester certification
• verification of Section 508 knowledge is required for contract personnel
• Hands-on experience writing user stories, acceptance criteria, and test cases in Jira and Confluence (Xray, Zephyr, or similar)
• Working knowledge of web application security testing (OWASP Top 10) and NIST SP 800-53 / ATO support activities
• Experience testing public-facing web portals and forms, including REST API testing with Postman or similar tools
• Strong written communication and stakeholder facilitation skills
• U.S. person
• Experience testing Drupal 10+ applications, Appian integrations, or Login.gov authentication flows
• Exposure to test automation (Cypress, Playwright, or Selenium)
• Certifications such as CBAP/CCBA, ISTQB, CSM/CSPO, SAFe, or CompTIA Security+
• Prior support of DOL or another federal enforcement or regulatory agency
• Experience using DOL-approved AI tools (e.g., Microsoft Copilot) to accelerate requirements and test case development