Eccalon LLC

Job Description Job Description This is NOT a remote position Job Description Eccalon is seeking a Senior SDET / QA Automation Engineer to build and own the automated testing strategy across our web applications and backend services supporting DoD, Intelligence, and enterprise programs. You will design and maintain robust test frameworks, integrate quality gates into CI/CD pipelines, and ensure the reliability of systems operating in regulated, compliance-driven environments. This is a hands-on senior role with broad visibility across the full engineering stack-working directly with software engineers, DevOps, and product teams to shift quality left and keep mission-critical software shipping with confidence. Responsibilities Test Automation & Framework Development Design, build, and maintain end-to-end UI automation frameworks using Playwright and/or Cypress across multiple web applications (e.g., lynxconnect.io, ). Develop and maintain API and backend test suites using Postman collections and REST Assured; validate authentication flows, data integrity, and service contracts. Write clean, maintainable test code in Python and/or JavaScript/TypeScript ; enforce consistent standards through code reviews and shared libraries. Build reusable test utilities, fixtures, and data factories that reduce test setup overhead and improve suite reliability. CI/CD Integration & Quality Gates Integrate automated test suites into CI/CD pipelines (GitLab CI/CD) to enforce quality gates on every pull request and deployment. Configure and maintain synthetic monitoring scripts (e.g., Playwright-based uptime checks) for production applications; triage and resolve false positives. Define and track test coverage metrics, pass rates, and flakiness trends; report quality signals to engineering leadership. API & Backend Testing Validate REST APIs against specifications; test authentication and authorization flows including OAuth2, SAML, OIDC, and JIT provisioning patterns. Develop data-driven test scenarios against AWS-hosted services (RDS/PostgreSQL, DynamoDB, Cognito) and Azure-backed platforms (GCC High). Collaborate with backend engineers to identify testability gaps in service design and recommend interface contracts that support automation. Cross-functional Collaboration & Quality Strategy Partner with DevOps, software engineering, and IT teams to embed testing earlier in the development lifecycle; contribute to definition-of-done criteria. Serve as the quality subject matter expert on the team-mentoring engineers on test best practices, automation patterns, and tooling selection. Maintain test documentation, test plans, and traceability matrices that satisfy compliance audit and ATO evidence requirements. Evaluate and recommend improvements to the overall QA toolchain and processes as applications and team scale. Required Qualifications Bachelor's degree in Computer Science, Engineering, or related field-or equivalent practical experience. 5+ years of experience in software development engineering in test (SDET), QA automation, or a related discipline. Hands-on proficiency with Playwright and/or Cypress for end-to-end UI test automation. Strong API testing skills using Postman (including collections, environments, and Newman for CI execution) and/or REST Assured. Solid programming skills in JavaScript/TypeScript and/or Python; ability to write production-quality test code, not just record-and-replay scripts. Experience integrating test automation into CI/CD pipelines (GitLab CI/CD, or Jenkins). Familiarity with AWS services (Cognito, RDS, DynamoDB, CloudWatch) and how they factor into end-to-end test design. Experience testing authentication and authorization flows (OAuth2, SAML, OIDC, MFA). Strong understanding of HTTP, REST, JSON, and web application architecture. Ability to work independently, prioritize across multiple projects, and communicate quality risk clearly to technical and non-technical stakeholders. Preferred Qualifications Experience with synthetic monitoring and uptime automation (e.g., Playwright-based health checks, Pingdom scripting). Familiarity with NIST 800-171, CMMC, or FedRAMP testing and traceability requirements. Experience testing applications hosted on Azure GCC High or AWS GovCloud environments. Background in performance or load testing (k6, JMeter, or Locust). Experience with accessibility testing (WCAG 2.1, 508 compliance) and security-focused test cases (OWASP Top 10 validation). ISTQB certification or equivalent QA/testing credential.

Job Description Job Description Job Description We are seeking a Junior Software Engineer to join our engineering team and contribute to the development, testing, and maintenance of software applications. This role is ideal for early-career engineers who are eager to learn, grow their technical skills, and work collaboratively in a supportive environment. You will work closely with experienced engineers, gaining hands-on experience while contributing to real, production-level code. Responsibilities Assist in designing, developing, and maintaining software applications Write clean, readable, and well-tested code under guidance from senior engineers Participate in code reviews and team discussions Debug and fix software defects Collaborate with product managers, designers, and engineers Learn and apply software development best practices Contribute to documentation and technical knowledge sharing Required Qualifications Bachelor's degree in Computer Science, Engineering, or related field (or equivalent experience) 0-2 years of relevant software development experience (including internships, co-ops, or projects) Familiarity with one or more programming languages such as Java, Python, JavaScript, TypeScript, C#, or similar Basic understanding of software engineering fundamentals (data structures, algorithms, OOP) Experience using version control systems (Git or similar) Exposure to web development, APIs, or backend services Familiarity with databases (SQL or NoSQL) Experience with testing frameworks or basic automated testing Understanding of Agile or Scrum development methodologies Internship, capstone project, or open-source contribution experience

Job Description Job Description Job Description We are seeking a Security Software Engineer to build and harden software systems supporting DoD programs operating under CMMC/NIST 800-171/FedRAMP compliance requirements. You will embed security across the SDLC-from design and code review through CI/CD and cloud deployment-working alongside engineering, DevSecOps, and IT teams in a regulated, cloud-native environment (AWS Commercial and GovCloud, Azure GCC High). Responsibilities Core Engineering & Secure Development Design and develop secure software with a security-first mindset baked into every phase of the SDLC. Apply secure coding standards, threat modeling, and vulnerability mitigation aligned to NIST 800-53 and CMMC Level 2/3 controls. Conduct architecture reviews and code hardening to address OWASP Top 10 and DoD STIGs. Automate security gates in CI/CD pipelines (SAST, DAST, dependency scanning, secrets detection). Security Architecture & Controls Design secure system and API architectures for multi-tenant cloud environments, including GCC High and FedRAMP-authorized platforms. Implement IAM controls, JIT provisioning, SSO/SAML/OIDC flows, and least-privilege authorization frameworks (e.g., Cognito, Azure AD). Instrument applications with security logging and monitoring that satisfies audit and continuous monitoring requirements (AU/SI control families). Vulnerability Management & Response Lead code reviews, SAST/DAST scans, and targeted penetration testing; document findings against control frameworks. Triage and remediate vulnerabilities within POA&M timelines; maintain artifact evidence for compliance assessments. Support incident response for application-layer events; contribute to after-action reports and corrective action plans. Cross-functional Collaboration Serve as the embedded security champion for engineering squads, raising the security bar through mentorship and code review culture. Develop and deliver security training and runbooks tailored to engineering and DevOps team members. Collaborate with DevOps/SRE to enforce secure IaC, WAF rules, network controls, and runtime monitoring across AWS and Azure environments. Required Qualifications Bachelor's degree in Computer Science, Engineering, or related field-or equivalent experience. 3+ years of software engineering experience with a strong focus on security. Proficiency in one or more programming languages (e.g., JavaScript/TypeScript, Python, Go, C#). Experience with secure coding practices and frameworks. Strong understanding of application security principles, including: OWASP Top 10 Secure API/REST design Cryptography fundamentals Authentication/authorization patterns Experience with code scanning tools (SAST/DAST), threat modeling, and penetration testing. Familiarity with NIST 800-171, CMMC, or FedRAMP security control requirements and evidence collection. Hands-on experience with AWS and/or Azure security services (IAM, WAF, Security Hub, Defender, Sentinel); GCC High or GovCloud experience a plus. Preferred Qualifications Experience with container security (Docker, ECS). Working knowledge of Zero Trust Architecture principles. Experience building DevSecOps pipelines in regulated environments; familiarity with tools like Prisma, Checkov, Snyk, or Aqua. Relevant certifications (any of the following): CISSP, CSSLP, or CASP+ OSCP CEH GIAC (GWAPT, GSEC, GWEB) or CCP/CCA (UK Cyber Essentials equivalent) Experience securing microservices or event-driven architectures on ECS; background in federal or cleared environments preferred.

Job Description Job Description This is NOT a remote position Job Description Eccalon is seeking a Senior SDET / QA Automation Engineer to build and own the automated testing strategy across our web applications and backend services supporting DoD, Intelligence, and enterprise programs. You will design and maintain robust test frameworks, integrate quality gates into CI/CD pipelines, and ensure the reliability of systems operating in regulated, compliance-driven environments. This is a hands-on senior role with broad visibility across the full engineering stack-working directly with software engineers, DevOps, and product teams to shift quality left and keep mission-critical software shipping with confidence. Responsibilities Test Automation & Framework Development Design, build, and maintain end-to-end UI automation frameworks using Playwright and/or Cypress across multiple web applications (e.g., lynxconnect.io, ). Develop and maintain API and backend test suites using Postman collections and REST Assured; validate authentication flows, data integrity, and service contracts. Write clean, maintainable test code in Python and/or JavaScript/TypeScript ; enforce consistent standards through code reviews and shared libraries. Build reusable test utilities, fixtures, and data factories that reduce test setup overhead and improve suite reliability. CI/CD Integration & Quality Gates Integrate automated test suites into CI/CD pipelines (GitLab CI/CD) to enforce quality gates on every pull request and deployment. Configure and maintain synthetic monitoring scripts (e.g., Playwright-based uptime checks) for production applications; triage and resolve false positives. Define and track test coverage metrics, pass rates, and flakiness trends; report quality signals to engineering leadership. API & Backend Testing Validate REST APIs against specifications; test authentication and authorization flows including OAuth2, SAML, OIDC, and JIT provisioning patterns. Develop data-driven test scenarios against AWS-hosted services (RDS/PostgreSQL, DynamoDB, Cognito) and Azure-backed platforms (GCC High). Collaborate with backend engineers to identify testability gaps in service design and recommend interface contracts that support automation. Cross-functional Collaboration & Quality Strategy Partner with DevOps, software engineering, and IT teams to embed testing earlier in the development lifecycle; contribute to definition-of-done criteria. Serve as the quality subject matter expert on the team-mentoring engineers on test best practices, automation patterns, and tooling selection. Maintain test documentation, test plans, and traceability matrices that satisfy compliance audit and ATO evidence requirements. Evaluate and recommend improvements to the overall QA toolchain and processes as applications and team scale. Required Qualifications Bachelor's degree in Computer Science, Engineering, or related field-or equivalent practical experience. 5+ years of experience in software development engineering in test (SDET), QA automation, or a related discipline. Hands-on proficiency with Playwright and/or Cypress for end-to-end UI test automation. Strong API testing skills using Postman (including collections, environments, and Newman for CI execution) and/or REST Assured. Solid programming skills in JavaScript/TypeScript and/or Python; ability to write production-quality test code, not just record-and-replay scripts. Experience integrating test automation into CI/CD pipelines (GitLab CI/CD, or Jenkins). Familiarity with AWS services (Cognito, RDS, DynamoDB, CloudWatch) and how they factor into end-to-end test design. Experience testing authentication and authorization flows (OAuth2, SAML, OIDC, MFA). Strong understanding of HTTP, REST, JSON, and web application architecture. Ability to work independently, prioritize across multiple projects, and communicate quality risk clearly to technical and non-technical stakeholders. Preferred Qualifications Experience with synthetic monitoring and uptime automation (e.g., Playwright-based health checks, Pingdom scripting). Familiarity with NIST 800-171, CMMC, or FedRAMP testing and traceability requirements. Experience testing applications hosted on Azure GCC High or AWS GovCloud environments. Background in performance or load testing (k6, JMeter, or Locust). Experience with accessibility testing (WCAG 2.1, 508 compliance) and security-focused test cases (OWASP Top 10 validation). ISTQB certification or equivalent QA/testing credential.

Job Description Job Description This is NOT a remote position Job Description We are seeking a Security Software Engineer to build and harden software systems supporting DoD programs operating under CMMC/NIST 800-171/FedRAMP compliance requirements. You will embed security across the SDLC-from design and code review through CI/CD and cloud deployment-working alongside engineering, DevSecOps, and IT teams in a regulated, cloud-native environment (AWS Commercial and GovCloud, Azure GCC High). Responsibilities Core Engineering & Secure Development Design and develop secure software with a security-first mindset baked into every phase of the SDLC. Apply secure coding standards, threat modeling, and vulnerability mitigation aligned to NIST 800-53 and CMMC Level 2/3 controls. Conduct architecture reviews and code hardening to address OWASP Top 10 and DoD STIGs. Automate security gates in CI/CD pipelines (SAST, DAST, dependency scanning, secrets detection). Security Architecture & Controls Design secure system and API architectures for multi-tenant cloud environments, including GCC High and FedRAMP-authorized platforms. Implement IAM controls, JIT provisioning, SSO/SAML/OIDC flows, and least-privilege authorization frameworks (e.g., Cognito, Azure AD). Instrument applications with security logging and monitoring that satisfies audit and continuous monitoring requirements (AU/SI control families). Vulnerability Management & Response Lead code reviews, SAST/DAST scans, and targeted penetration testing; document findings against control frameworks. Triage and remediate vulnerabilities within POA&M timelines; maintain artifact evidence for compliance assessments. Support incident response for application-layer events; contribute to after-action reports and corrective action plans. Cross-functional Collaboration Serve as the embedded security champion for engineering squads, raising the security bar through mentorship and code review culture. Develop and deliver security training and runbooks tailored to engineering and DevOps team members. Collaborate with DevOps/SRE to enforce secure IaC, WAF rules, network controls, and runtime monitoring across AWS and Azure environments. Required Qualifications Bachelor's degree in Computer Science, Engineering, or related field-or equivalent experience. 3+ years of software engineering experience with a strong focus on security. Proficiency in one or more programming languages (e.g., JavaScript/TypeScript, Python, Go, C#). Experience with secure coding practices and frameworks. Strong understanding of application security principles, including: OWASP Top 10 Secure API/REST design Cryptography fundamentals Authentication/authorization patterns Experience with code scanning tools (SAST/DAST), threat modeling, and penetration testing. Familiarity with NIST 800-171, CMMC, or FedRAMP security control requirements and evidence collection. Hands-on experience with AWS and/or Azure security services (IAM, WAF, Security Hub, Defender, Sentinel); GCC High or GovCloud experience a plus. Preferred Qualifications Experience with container security (Docker, ECS). Working knowledge of Zero Trust Architecture principles. Experience building DevSecOps pipelines in regulated environments; familiarity with tools like Prisma, Checkov, Snyk, or Aqua. Relevant certifications (any of the following): CISSP, CSSLP, or CASP+ OSCP CEH GIAC (GWAPT, GSEC, GWEB) or CCP/CCA (UK Cyber Essentials equivalent) Experience securing microservices or event-driven architectures on ECS; background in federal or cleared environments preferred.

Job Description Job Description Job Description The Junior Cyber Advisor supports cybersecurity missions by assisting senior cyber advisors, analysts, and engineers in delivering cyber risk analysis, technical assessments, and customer support. This is an entry-level role designed for individuals beginning their career in cybersecurity who demonstrate strong technical aptitude, curiosity, and growth potential. This position provides hands-on exposure to cyber operations, assessments, and advisory support under the guidance of senior team members. Responsibilities Assist senior Cyber Advisors with cybersecurity assessments, documentation, and reporting Support analysis of cyber threats, vulnerabilities, and risks across systems and networks Help collect, organize, and maintain technical and security-related documentation Participate in cyber reviews, briefings, and internal meetings Monitor and escalate basic security issues under supervision Support customer requests related to cybersecurity inquiries or deliverables Assist with research on cybersecurity tools, techniques, and emerging threats Maintain professionalism and discretion when working with sensitive information Perform additional tasks and special projects as assigned Required Qualifications Bachelor?s degree in Cybersecurity, Computer Science, Information Technology , or related field (or equivalent experience) 0?2 years of experience in cybersecurity, IT, help desk, or technical support roles Basic understanding of: Networking concepts (TCP/IP, DNS, firewalls) Operating systems (Windows, Linux fundamentals) Cybersecurity principles (CIA triad, access control, basic threat concepts) Strong analytical and problem-solving skills Ability to learn quickly in a fast-paced technical environment Strong written and verbal communication skills High level of professionalism, judgment, and attention to detail Ability to work both independently and as part of a team Equal Employment Opportunity (EEO) Policy Eccalon provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.