Lead Quality Assurance Analyst

Company Description

Reva.AI is a unified access control and AI security platform for agentic and cloud-native environments. It enforces intent-aware, least-privilege access across human, machine and AI identities, through AI workload discovery, behavioral analytics, policy governance and runtime enforcement.

What you'll do

• Define the QA strategy, and design and maintain test plans and reusable test cases.
• Do manual testing across web and API layers for new features, enhancements and integrations.
• Validate authorization logic across RBAC, ABAC and PBAC/ReBAC, including policy conflicts, precedence and default-deny behavior.
• Test OAuth 2.0, OIDC, SAML and JWT flows, and IAM, PAM and IGA workflows such as provisioning, access reviews and revocation.
• Build adversarial test cases for agentic AI risks: prompt injection, tool-call abuse, excessive agency and data leakage.
• Lead defect triage, and own release quality gates and sign-off.
• Work with product and engineering to tighten requirements before they're built.
• Mentor the QA team and set testing standards.

Required

• 8+ years in QA, including leading QA for SaaS, security or cloud-native products.
• Hands-on manual testing: test design, execution and defect reporting.
• Experience setting up and enforcing QA processes.
• Working knowledge of IAM, IGA, RBAC/ABAC, OAuth 2.0, OIDC, SAML and JWT.
• Comfort with API testing tools such as Postman or curl.
• Strong analytical and communication skills.
• A Bachelor's degree in Computer Science, Engineering or a related field, or equivalent experience.

Nice to have

• Experience testing IAM, PAM, ZTNA or IGA products.
• Exposure to Cedar, OPA/Rego or OpenFGA.
• Familiarity with Entra ID, Okta, MCP or AI gateways.
• Basic automation experience (Playwright, pytest, Katalon,Postman in CI) and tools like Jira or TestRail.
• ISTQB or security certifications (Security+, CISSP, Okta, Entra ID).