QA Engineer / DevSecOps Analyst

About The Company

CEdge is a leading technology solutions provider committed to delivering innovative and secure software solutions to government agencies and private sector clients. With a focus on quality, security, and compliance, CEEdge leverages cutting-edge technologies and industry best practices to ensure the highest standards in project delivery. The company prides itself on fostering a collaborative and dynamic work environment that encourages professional growth and continuous learning. Located in Saint Louis, MO, CEEdge offers flexible work arrangements, including remote and on-site opportunities, to accommodate the diverse needs of its team members.

About The Role

CEdge is seeking a dedicated QA Engineer / DevSecOps Analyst (Supporting) to join its team in Saint Louis, MO. This role is pivotal in managing the quality and security pipeline for all TMS maintenance and programming deliverables. The successful candidate will own the security and quality assurance processes, including scheduling and executing security scans, triaging vulnerabilities, and ensuring all deliverables meet stringent security and quality standards before acceptance. This position requires a proactive individual capable of coordinating with development teams, maintaining CI/CD pipelines, and supporting accessibility testing to ensure compliance with ADA/Section 508 standards. The role offers an excellent opportunity to work alongside world-renowned technology experts and contribute to critical government projects with measurable security SLAs.

Qualifications

• Minimum 3 years of experience in software QA, test engineering, or application security
• Hands-on experience with static application security testing (SAST) tools such as SonarQube, Veracode, Checkmarx, or equivalent
• Experience configuring CI/CD pipelines in Azure DevOps, Jenkins, or similar platforms
• Proficiency in writing and executing test plans, test cases, and regression test suites for .NET web applications
• Ability to classify and triage CVSS-scored vulnerabilities and communicate remediation priorities effectively
• Ability to pass MoDOT background check

Responsibilities

• Schedule, execute, and report all required 90-day security code scans for critical and external-facing TMS web applications, maintaining static scan scores at or above 90
• Triage scan results by classifying vulnerabilities based on severity, assigning ownership to developers, and tracking high-threat remediation efforts to closure within 10 business days
• Operate and maintain the CI/CD pipeline in Azure DevOps, including configuring build triggers, automated tests, and quality gates to enforce security standards
• Develop and expand automated test suites (unit, integration, regression) for high-risk TMS modules, ensuring comprehensive test coverage during SOW development
• Execute quality gates for SOW deliverables, confirming completion of unit, integration, and system tests, and preparing staging packages for MoDOT acceptance
• Participate in code reviews with a focus on security and test coverage, identifying potential security or testability issues during architecture walkthroughs
• Track and report security and quality metrics weekly to the Technical Program Manager, and produce monthly compliance evidence for invoicing
• Maintain a mirrored workstation environment that aligns with MoDOT’s security scanning toolchain, coordinating updates within 30 days of infrastructure changes
• Support ADA/Section 508 accessibility testing for all new and modified web applications to ensure compliance with accessibility standards

Benefits

• Full Benefits Package
• 10 Days Paid Time Off (PTO)
• 10 Paid Holidays
• 401K Retirement Plan

Equal Opportunity

We are proud to be an Equal Employment Opportunity employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or any other basis protected by federal, state, or local law.