Senior Security & QA Engineer

We are seeking a Senior Security & QA Engineer responsible for validating the security, compliance, and reliability of the MCP Server Registry, ensuring proper authentication, credential protection, governance enforcement, and end-to-end registry quality.

Responsibilities

• Validate authentication enforcement and identify credential exposure risks across the registry
• Design and execute functional tests covering CRUD operations and validation rules
• Build and maintain automated test suites using Python and pytest
• Enforce lifecycle constraint testing, such as preventing deletion of active MCPs or setting in-use MCPs as inactive
• Audit AWS CloudTrail logs to confirm compliance and traceability of registry actions
• Assess registry and API endpoints for security vulnerabilities and compliance gaps
• Collaborate with development teams to ensure governance policies are properly enforced throughout the registry lifecycle

Requirements

• 3+ years of experience in security testing or QA engineering
• Experience in registry or API security testing
• Experience in AWS authentication flow testing
• Proficiency in Python test automation with pytest
• Knowledge of lifecycle constraint testing and functional test design for CRUD and validation rules
• Familiarity with AWS CloudTrail audit log validation
• English proficiency at B2 level or higher

Nice to have

• Familiarity with MCP gateway enforcement testing
• Knowledge of Vault secret exposure testing
• Understanding of governance lifecycle gate validation