Software Testing Engineer at CyberMaxx
Linthicum Heights, MD
—
Jul 27, 2026
Linthicum Heights, MD
Jul 29, 2026
What this job asks for AI summary
A QA-focused role at a managed detection and response (MDR) cybersecurity firm, responsible for testing a range of internal and customer-facing web and mobile applications. The engineer writes test cases in Python, performs visual, behavioral, and security testing (including injection, CSRF/XSS, and credential mismanagement), manages bug lifecycles in Jira within a scrum workflow, and contributes to automated testing pipelines. Security testing experience is a meaningful part of the day-to-day work.
Mid level · 3+ years · Full-time
Long application — this platform typically asks you to create an account and re-enter your work history.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $106,594 (middle half $82,076–$136,109).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 29, 2026. It is a model, not a headcount.
Why we read it this way (7)
The degree requirement accepts 'equivalent additional industry experience' in lieu of a Bachelor's degree, so no formal degree is hard-gated.
Django REST Framework is called 'a strong plus' in the narrative, not listed under requirements — treated as preferred.
APIDog is explicitly flagged as 'a plus' — treated as preferred.
AI-based review and remediation techniques appear in the requirements section but are framed as 'experience with' without firm gating language; treated as preferred given the soft framing.
Cybersecurity industry experience is explicitly noted as 'a plus' — not captured as a skill since it is domain experience rather than a named technology.
The alt SOC (15-1212 Information Security Analysts) is noted because security testing — injection, CSRF/XSS, credential mismanagement — is a meaningful and explicitly called-out portion of the role, though QA/testing is clearly the primary function.
Ignored 1 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): AI-based review and remediation.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.