About this role
<div>
<p><b><strong>About <a href="https://himalayas.app/companies/halborn">Halborn</a> Inc</strong></b></p>
<p>Our mission is to provide value-add security services and products to the world’s most cutting edge technology firms and that starts with blockchain tech. Founded in 2019, <a href="https://himalayas.app/companies/halborn">Halborn</a> is an elite cyber security company focused on solving complex adversarial problems unique to the cryptocurrency and fintech industries. From breaches and social engineering to stolen private keys and economic hacks, <a href="https://himalayas.app/companies/halborn">Halborn</a> solves it. Our clientele are the exclusive blockchain companies as well as new startups with high growth trajectories.</p>
<p><b><strong>Our Culture</strong></b></p>
<p><a href="https://himalayas.app/companies/halborn">Halborn</a> is a globally distributed team of 100+, looking to grow our elite team of white hat hackers, sales professionals, security engineers and DevSecOps specialists who value independence, want to make their own hours, work for themselves and have a passion for the ever evolving cryptocurrency industry. </p>
<p><b><strong>Our Commitment to Diversity</strong></b></p>
<p><a href="https://himalayas.app/companies/halborn">Halborn</a> Inc is an Equal Opportunity Employer. We do not discriminate based upon race, religion, color, national origin, sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, education, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics and celebrates the diversity of its growing team.</p>
<p>We are unable to sponsor or take over sponsorship of employment Visas at this time.</p>
<p>Recruitment agencies and consultants may not submit resumes/CVs through this website or directly to managers. <a href="https://himalayas.app/companies/halborn">Halborn</a> does not accept unsolicited agency resumes, and will not pay fees to any third-party agency or company that does not have a signed agreement with <a href="https://himalayas.app/companies/halborn">Halborn</a> Inc.</p>
</div><div>
<p>We are looking for a QA Engineer who treats manual testing as a temporary condition. You will own quality across the internal platforms our security researchers depend on and the client-facing products that deliver our findings — and you will build the automation, tooling, and AI-assisted workflows that make that coverage possible without a headcount-shaped bottleneck. If your instinct when you see a repetitive process is to write the thing that replaces it, you will fit here.</p>
<p><b><strong>Responsibilities</strong></b></p>
<ul>
<li>Own the test strategy for <a href="https://himalayas.app/companies/halborn">Halborn</a>'s internal engineering platforms and client-facing products, from unit and integration coverage through end-to-end and regression suites.</li>
<li>Design, build and maintain automated test suites in code — UI, API, and data-layer — and keep them fast, deterministic, and trusted by the engineers who depend on them.</li>
<li>Use LLM-assisted tooling to accelerate test authoring, generate edge cases from specs and diffs, triage failing runs, and summarize regressions for the team.</li>
<li>Build and tune quality gates in CI/CD so that broken builds never reach a client environment, and so that the feedback loop stays measured in minutes.</li>
<li>Identify manual QA processes and automate them out of existence — release checklists, environment setup, test data generation, smoke verification, reporting.</li>
<li>Reproduce, isolate, and file defects with unambiguous repro steps, expected versus actual behavior, and enough context for an engineer to fix it without a follow-up conversation.</li>
<li>Partner with security engineers to fold security regression checks — authentication, authorization, input handling, secrets exposure — into the standard pipeline.</li>
<li>Run performance, load, and reliability testing against services handling sensitive audit and engagement data.</li>
<li>Define and report the quality metrics that matter: escaped defect rate, flake rate, coverage of critical paths, and time to detection.</li>
<li>Contribute to release readiness decisions and act as an informed voice on whether something ships.</li>
</ul>
<p><b><strong>Qualifications</strong></b></p>
<ul>
<li>3 to 5 years in QA engineering, SDET, or test automation, with a demonstrated shift from manual execution toward automated coverage.</li>
<li>Strong programming ability in at least one of TypeScript, JavaScript, or Python — you write test code that other engineers are willing to read and maintain.</li>
<li>Hands-on experience with modern automation frameworks such as Playwright, Cypress, Selenium, pytest, or equivalent.</li>
<li>Practical API testing experience, including contract, integration, and negative-path testing against REST or GraphQL services.</li>
<li>Working knowledge of CI/CD systems (GitHub Actions, GitLab CI, Jenkins, or similar) and comfort owning pipeline configuration yourself.</li>
<li>Daily, deliberate use of AI coding assistants and LLM tooling in your own workflow, with a clear point of view on where they help and where they must be verified.</li>
<li>Comfort with Git, containerized local environments, and reading application code to understand what you are testing rather than testing blind.</li>
<li>Excellent written communication — in a distributed, asynchronous team, a well-written bug report or test plan is the deliverable.</li>
<li>High autonomy and strong self-direction in a fast-moving environment where priorities shift.</li>
<li>Willingness to learn the technical aspects of blockchain, smart contracts, and cybersecurity.</li>
</ul>
<p><b><strong>Bonus Points</strong></b></p>
<ul>
<li>Experience testing Web3 applications — wallet flows, testnets, RPC interactions, or smart contract tooling such as Foundry or Hardhat.</li>
<li>Experience building evaluation harnesses for LLM-powered features, including regression testing of non-deterministic output.</li>
<li>Background in security testing, OWASP methodology, or hands-on time with tools like Burp Suite.</li>
<li>Performance and load testing with k6, Locust, JMeter, or similar.</li>
<li>Experience with observability tooling and using production telemetry to find gaps in test coverage.</li>
<li>Open source contributions to testing frameworks or developer tooling.</li>
<li>Knowledgeable of the latest trends in Blockchain and DeFi.</li>
</ul>
</div><p>Originally posted on <a href="https://himalayas.app">Himalayas</a></p>