Government and Infrastructure - Service Delivery Center - Cybersecurity QA Engineer

About the role

EY's Government & Public Sector practice helps federal, state, local, and education clients implement new ideas to achieve mission outcomes. The Service Delivery Center — a core component of GPS — comprises high-performing, US-based resources who work closely with experienced professionals to deliver project-based work and managed services to federal clients. Our cybersecurity professionals possess diverse industry knowledge, unique technical expertise, and specialized skills to assess, improve, build, and operate integrated security operations.

The QA Engineer will be a dedicated member of a client software development team supporting an Agile/Scrum delivery model. This role ensures the quality, reliability, and security of mission-critical financial applications through manual and automated testing. Responsibilities include executing test cases and automation scripts each sprint, performing end-to-end regression testing in lower environments, and conducting post-production release validation to ensure system stability and compliance with client standards.

Responsibilities

• Participate actively in Agile/Scrum ceremonies: sprint planning, backlog refinement, daily stand-ups, sprint reviews, and retrospectives
• Analyze user stories, acceptance criteria, and technical requirements to guide creation of effective test scripts and cases
• Execute manual and automated test cases/scripts during each sprint
• Validate new features, enhancements, bug fixes, and integrations
• Develop, maintain, and execute: manual test cases, automated test scripts, regression test suites
• Perform end-to-end system testing across integrated FEMA and DHS identity services components
• Validate data integrity, business rules, workflows, and user access controls
• Design and maintain automation frameworks and test scripts for web-based applications
• Identify manual test case candidates for automation and continuously expand regression automation coverage
• Execute automated test suites as part of CI/CD pipelines (where applicable)
• Troubleshoot, maintain, and optimize automation scripts to ensure reliability
• Perform full regression testing in lower environments prior to releases
• Conduct post-production release testing (end-to-end, smoke, sanity validation) to ensure successful deployments
• Support User Acceptance Testing (UAT) by validating fixes and assisting with defect resolution
• Identify, document, and track defects with clear reproduction steps, expected vs. actual results, and supporting evidence
• Collaborate closely with developers, technical leads, system owners, and Scrum Masters to provide effective test coverage and resolve defects efficiently
• Re-test and validate fixes to ensure defects are properly resolved
• Ensure testing aligns with DHS security, compliance, and quality standards
• Maintain QA documentation including test plans, test cases, regression suites, and test execution evidence
• Support audits, reviews, and reporting requirements as needed

Requirements

• Bachelor's degree in Computer Science, Information Systems, Engineering, Business, or a related field
• 3+ years of experience as a QA Engineer in an Agile/Scrum environment
• Hands-on experience with both manual testing and automated testing
• Strong understanding of software testing methodologies, SDLC, and STLC
• Experience executing sprint-based testing and regression testing
• Familiarity with test management and defect tracking tools (e.g., Jira, Xray, Zephyr)
• Ability to obtain and maintain a Secret level clearance
• Comfortable working in-person as needed; role expects 60% in-person engagement consistent with EY's collaborative working model, subject to client and business requirements

Preferred qualifications

• Prior consulting experience
• Experience supporting federal government systems, DHS, FEMA, or other large-scale enterprise applications
• Experience testing identity services, access management, or security-sensitive systems
• Experience with CI/CD pipelines and test automation integration
• Knowledge of API testing and database validation
• Familiarity with cloud-based or hybrid environments
• Familiarity with programming languages (Java, JavaScript, Python, etc.)

What we look for

Intellectually curious people with a genuine passion for cybersecurity. We value confidence in both presentation and technical abilities, and the drive to grow into a leading expert who can speak up with innovative ideas that make a lasting difference.

Compensation & benefits

Base salary range for all US geographic locations: $77,500 – $140,900. For New York City Metro Area, Washington State, and California (excluding Sacramento): $92,900 – $160,500. Individual salaries are determined by factors including education, experience, knowledge, skills, and geography.

• Comprehensive medical and dental coverage
• Pension and 401(k) plans
• Wide range of paid time off options
• Flexible vacation policy — you decide how much vacation time you need based on personal circumstances
• Designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence to support physical, financial, and emotional well-being

Work model

Team-led and leader-enabled hybrid model. Expectation for most people in external, client-serving roles to work together in person 40–60% of the time over the course of an engagement, project, or year.