Engineering QA Engineer; Contractor) Remote

Herd Security is an agentic AI creative platform built for continuous security training and simulation. Founded in 2025, Herd helps organizations move beyond once-a-year compliance check boxes, replacing static programs with dynamic curricula that evolve alongside emerging threats without adding operational overhead. Security and GRC teams use the platform as a creative partner to translate practitioner expertise into compelling content and deploy it across the channels employees frequently use, including Slack, Teams, and LMS.

When a new threat surfaces, the platform enables organizations to shift from IT tickets or vendor requests to iterative microlessons delivered the same day. This puts the people behind security back at the center, empowering practitioner expertise, making awareness more habitual, and using every interaction to fuel a feedback loop that strengthens the human layer of defense.

We are looking for a QA Engineer to join us on a contract basis to own the quality and deployment-safety story for our platform. Because Herd is an agentic creative platform that generates and deploys training content directly into Slack, Teams, and LMS environments, a bad deploy doesn't just inconvenience users: it can disrupt customer operations, surface incorrect security guidance, or create the perception of an incident.

Your mandate is to build the testing, staging, and release-verification practices that let us ship quickly and confidently, including for AI-generated outputs where traditional deterministic testing breaks down. This is a high-autonomy role for someone who treats QA as an engineering discipline rather than a checklist.

• Design and maintain end-to-end test suites covering the full platform: agentic content generation, micro lesson delivery in Slack and Teams, LMS integrations, and simulation workflows
• Build automated regression coverage for multi-tenant scenarios, including tenant isolation, permissions, and data integrity
• Develop evaluation approaches for AI-generated content, including guardrail testing, red-teaming of outputs, and safety checks before content reaches end users
• Define and operate pre-production verification workflows for releases, including smoke tests, canary deployments, and rollback procedures
• Partner with engineering to embed testability into new features from the design stage, rather than bolting it on afterward
• Develop test environments and fixtures that realistically model enterprise customer configurations
• Investigate and reproduce production issues, working with engineering to drive root-cause fixes and prevent recurrence
• Contribute to observability and alerting practices so that issues slipping past QA are caught early in production

• Strong proficiency in Type Script or a comparable typed language, with the ability to read and contribute to application code, not just test code
• Experience designing automated test strategies for full-stack web applications, including API, integration, and end-to-end tests
• Working knowledge of PostgreSQL and the kinds of bugs that emerge from schema migrations, transactional semantics, and multi-tenant data models
• Experience testing applications that integrate with third-party APIs, including OAuth flows, webhooks, and rate-limited services
• Familiarity with CI/CD pipelines and the ability to integrate testing seamlessly into developer workflows
• Strong written communication: QA findings are only useful if they are clear, reproducible, and actionable

• Experience testing AI-powered or LLM-driven features, including evaluation frameworks and output quality assessment
• Experience testing Slack apps, Microsoft Teams bots, or LMS integrations
• Background testing security products, where false positives and false negatives have asymmetric costs
• Familiarity with Playwright, Cypress, Vitest, or similar modern testing frameworks
• Experience with chaos engineering, load testing, or reliability engineering practices
• Prior experience at early-stage startups where QA had to scale from zero
• Contract rate commensurate with experience
• Flexible hours with core overlap in US Pacific time
• Potential to extend the engagement or convert to full-time based on mutual fit
• Direct influence on how quality is built into a growing platform

• Type:
  Contract (6-month initial engagement, with potential to extend or convert)