Test Engineer

More of the product teams that ask us for a review sell to German customers, and their engineers often work in Germany too. So our next Test Engineer will be based there. The job is full-time and remote from anywhere in Germany; the rest of Latchform works from San Francisco, nine hours behind, so team calls land in your late afternoon. A broken access check is only useful to a client if their engineers can reproduce it and keep it fixed. You turn our findings into tests they can run. In scope

• Write reproduction steps and automated API tests for each finding, against the client’s staging environment and test tenants
• Check role and tenant boundaries request by request with Postman or Burp Suite
• Retest fixed findings at the follow-up and record what changed
• Keep the test accounts and test data of each review in order
• Write the testing notes that go into the report

Out of scope

• Production systems, unless a client agrees in writing

• Sales calls and fee quotes, Burp Suite, OAuth 2.0 and OpenID Connect, the ISTQB Foundation certificate, a CI pipeline you set up yourself. What Latchform covers

• Permanent full-time contract, from home anywhere in Germany
• 30 days’ holiday a year plus public holidays
• A company pension (bAV) that Latchform pays into
• A yearly budget for training, certifications and conference tickets
• A laptop, a second screen and a home office allowance
• Flexible hours, with team calls agreed in advance

• A degree in computer science, software engineering or a related field, or comparable training
• Experience writing automated tests (pytest, Jest, Playwright or similar) in a job, an internship or a project
• You can call and read a REST API: methods, status codes, headers and tokens
• Git

Latchform is an application security consultancy in San Francisco. We review the code and design decisions that control who can use an application and what it lets them reach, and every finding comes with steps an engineer can repeat. #LI-Remote