Senior SDET, API / Security
Core
Design, build, and maintain automated test frameworks and tooling to validate the quality, reliability, and security of Keeper's APIs, SDKs, and automation workflows.
Role type
Senior IC SDET (API & Security)
Builds
Automated test suites for RESTful and GraphQL APIs integrated into CI/CD pipelines
Domain
Cybersecurity / API Security / Cloud Infrastructure
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
API testing frameworks (Postman, REST Assured), Python or JavaScript scripting, Pytest, OAuth2/JWT/API keys, HTTP/JSON protocols, CI/CD pipeline integration (GitHub Actions), security vulnerability testing (OWASP API Top 10)
Preferred skills
Security testing tools (Burp Suite, OWASP ZAP), compliance frameworks (SOC 2, ISO 27001, FedRAMP), cloud services (AWS API Gateway, Lambda, Secrets Manager), performance/load testing
Technologies
Python, JavaScript, Pytest, Jest, Postman, REST Assured, GitHub Actions, AWS, Burp Suite, OWASP ZAP
Responsibilities
Lead design and implementation of scalable automated test frameworks for RESTful and GraphQL APIs; Define and implement advanced API validation strategies including authentication, authorization, rate limiting, and error handling; Conduct security-focused testing including token validation, input fuzzing, and access control verification; Own integration of automated API and security test suites into CI/CD pipelines; Collaborate with developers to test API contract adherence and backward compatibility; Lead evaluation and testing of secure integrations with third-party services and identity providers
Seniority
Senior, hands-on IC