[Job - 31028] QA with Security Fix Validation Expertise, Brazil

At CI&T, we help large enterprises transform the potential of AI into real business impact with AI Deployment, AI-native execution, and tech-integrated business solutions.

With 30 years of experience in technological transformation, we accelerate innovation with expertise in Agentic SDLC, Application modernization, Data & AI, Martech and Business strategy.

We are 8,000 CI&Ters across more than 25 countries, collaborating to build solutions with real impact. AI is already part of how we work, evolve, and innovate every day.

At CI&T, our rapid growth is fueled by the innovative solutions we create for our global clients.

We are seeking a detail-driven QA to safeguard quality on a security remediation squad serving a large US mortgage lender. Remediation at volume is where regressions hide, and you will be the control that keeps throughput from costing the client stability — proving each fix works and nothing else broke.

Responsibilities:

• •Validate remediation fixes by confirming the vulnerability no longer reproduces and intended behavior remains intact.
• •Design and execute regression testing around each fix, focusing on the blast radius of dependency upgrades and configuration changes.
• •Build and maintain automated regression coverage for the areas the squad touches most frequently.
• •Define testable validation and closure criteria together with the developers so "fixed" is a verifiable statement.
• •Produce validation evidence the client's risk program can attach to closure records.
• •Execute testing across the client's AWS environments and verify deployment behaves consistently between them.
• •Raise quality risk early when a fix's scope is broader than it first appears.
• •Integrate automated tests into the client's CI/CD pipeline.

Requirements:

• •Bachelor's degree in Computer Science, Information Technology, or a related field.
• •Experience as QA or quality engineering for web applications.
• •Good English communication skills (reading, writing, and speaking) — direct collaboration with a US-based engineering team.
• •Proven capability in both manual exploratory testing and test automation.
• •Test automation experience with a modern framework such as Cypress, Playwright, or Selenium.
• •API testing experience with Postman, REST-assured, or an equivalent tool.
• •Strong regression testing discipline, including the ability to scope what a change could have broken rather than re-running everything.
• •Comfort testing PHP web applications hosted on AWS, including the ability to read PHP well enough to understand what a fix changed.
• •Experience integrating automated tests into CI/CD pipelines.

Nice to Have:

• •Security testing exposure — validating vulnerability fixes, OWASP-based test cases, and basic penetration testing concepts.
• •Performance testing experience with JMeter or k6.
• •SQL proficiency for data validation.
• •Prior experience on a remediation or technical debt squad.
• •Experience in mortgage or financial services.
• •Experience working with international clients.

Join CI&T and be a part of our mission to ensure quality never becomes the trade-off for speed. If you have a passion for quality engineering and want to own validation on work that directly reduces a client's security risk, we want to hear from you!

#LI-JM5