Automation Development: Design and maintain automation frameworks (e.g., Playwright, Selenium) using JavaScript/TypeScript, Java, or Python to test React-based web applications. Develop and execute automated security test plans using the tools like Selenium or Custom framework to identify vulnerabilities (E.g. OWASP Top 10) within React components and APIs
Frontend Security Testing: Perform security testing, including OWASP top-ten prevention, cross-site scripting (XSS) prevention, and CSRF protection within React components.
API Security & Validation: Validate Backend APIs to ensure secure data handling and authentication
Regulatory Compliance: Ensure applications meet compliance standards (e.g., HIPAA, GDPR, ISO 27001, NIS2/DORA). Design and maintain automated “Quality Systems” that monitor software health, performance, and reliability throughout the development lifecycle
Security Control Assessment: Evaluate and implement security controls, including managing security telemetry (SIEM, EDR) and patching identified vulnerabilities.
Compliance Audits: Support internal and external audits, including technical documentation of security measures
Security Control Assessment: Evaluate and implement security controls, including managing security telemetry (SIEM, EDR) and patching identified vulnerabilities.
Compliance Audits: Support internal and external audits, including technical documentation of security measures
Mandatory Technical Skills & Competencies
Languages: Strong proficiency in React.js, JavaScript, TypeScript, Python, Java.
Automation Tools: Selenium, Cucumber BDD, RestAssured, or Playwright/Cypress.
Frontend: Deep understanding of React.js, including hooks, state management, and component lifecycle to write effective unit and integration test
Database: Excellent SQL skills for verifying financial data, according to this Build In job listing.
Infrastructure: Experience with cloud services (GCP) and containerization
Programming Expertise: Proficiency in languages like JavaScript/TypeScript, Java, Python, C#, Go, or Kotlin used in modern sports tech stacks.
Automation Tooling: Experience with tools like Selenium, Playwright, Cypress, Appium (for mobile), and REST Assured (for APIs).
Experience with static/dynamic application security testing (SAST/DAST) tools and vulnerability scanners
Knowledge of monitoring tools such as Prometheus, Grafana, or ELK stack.
Understanding of distributed tracing and logging.
Cloud concepts like fundamentals, App Configuration / App Settings, Key Vault, Cache, Service Bus (queues/topics), Event driven architecture, Blob Storage, cloud security, scalability, and resiliency patterns
Understanding of Microservice Development design, implementation, Middleware (Kafka), filters, exception handling, logging, Authentication and authorization (JWT/OAuth concepts), Performance optimization and secure coding practices
Agile and Collaboration Tools: Sprint planning, work item tracking, and agile delivery, Technical documentation and knowledge sharing