Commence

Design and improve testing strategies for full-stack applications ensuring reliability and compliance. | 5+ years in software test engineering with automated testing in .NET and React, plus API and performance testing experience. | Description At Commence, we’re the start of a new age of data-centric transformation, elevating health outcomes and powering better, more efficient process to program and patient health. We combine quality data-driven solutions that fuel answers, technology that advances performance, and clinical expertise that builds trust to create a more efficient path to quality care. With human-centered, healthcare-relevant, and value-based solutions, we create new possibilities with data. We provide proof beyond the concept and performance beyond the scope with a focus on efficiencies that transform the lives of those we serve. With a culture driven by purpose, straightforward communication and clinical domain expertise, Commence cuts straight to better care.? Requirements As a Sr. QA Engineer at Commence, you will serve as the quality gate for our engineering teams, owning the design, execution, and continuous improvement of testing strategies across our full-stack applications. Working alongside Full-Stack Engineers building on .NET, React, and AWS, you will ensure that the software we deliver to federal and commercial health clients, meets the highest standards of reliability, security, and regulatory compliance. This role is ideal for someone who approaches quality with an engineer’s mindset: you find the edge cases others miss, you build systems that prevent defects rather than just catching them, and you treat a well-designed test suite as a product in its own right. Design, develop, and maintain comprehensive test plans, test cases, and test suites covering functional, regression, integration, performance, and security testing for .NET and React applications. Execute manual and automated tests against RESTful APIs, front-end components, and back-end services; document and triage defects with reproducible steps and clear severity classifications. Build and maintain automated test frameworks using tools such as Selenium, Playwright, Cypress, or equivalent; integrate automated test execution into CI/CD pipelines. Validate AWS-hosted and serverless application deployments, including regression testing post-deployment across staging and production environments. Conduct API-level testing using tools such as Postman, RestAssured, or SoapUI to validate contracts, error handling, and data integrity between front-end and back-end systems. Develop and execute performance and load tests to validate system behavior under expected and peak conditions; identify bottlenecks and work with engineers to remediate. Ensure compliance testing coverage against HIPAA, NIST, and healthcare regulatory standards; validate data handling, access controls, and audit logging meet contractual and regulatory requirements. Partner with Full-Stack Engineers during development to shift testing left — reviewing requirements, providing testability feedback on designs, and pairing on unit and integration test coverage. Support and expand test coverage for document management and OCR-integrated workflows, validating data extraction accuracy and downstream processing integrity. Maintain clear, up-to-date test documentation including traceability matrices, test reports, and defect logs; communicate test status and quality risk clearly to technical and non-technical stakeholders. Participate in code reviews with a quality lens, flagging missing test coverage, error handling gaps, and security risks. Contribute to the team’s quality culture by establishing testing standards, improving testing processes, and mentoring engineers on testing best practices. Stay current with industry trends in test engineering, automation tooling, and quality assurance methodology. Qualifications 5+ years of experience in software test engineering, QA engineering, or a closely related role with demonstrated ownership of test strategy and execution. Proficiency in automated testing frameworks and tools applicable to .NET/C# and React environments (e.g., xUnit, NUnit, MSTest for backend; Jest, React Testing Library, Cypress, or Playwright for frontend). Hands-on experience with API testing, including REST API validation, response schema verification, and error condition coverage. Experience designing and integrating automated tests into CI/CD pipelines (e.g., GitHub Actions, Azure DevOps, Jenkins, or equivalent). Solid understanding of test design techniques including boundary value analysis, equivalence partitioning, and exploratory testing. Experience with performance and load testing tools including providing recommendations on tooling suite (e.g., JMeter, k6, Locust, or equivalent). Experience working with cloud-hosted applications; familiarity with AWS service behaviors and how deployment architecture affects testability. Working knowledge of relational and/or NoSQL database testing, including writing queries to validate data integrity. Experience with version control systems (Git-based) and collaborative development workflows. Strong analytical and problem-solving skills with meticulous attention to detail. Clear written and verbal communication skills; ability to document defects and test results that engineers and non-engineers can act on. Preferred Qualifications Experience testing in federal health IT environments, or regulated industries with compliance requirements (HIPAA, NIST 800-53, FedRAMP). Familiarity with document management systems and OCR workflow testing, including accuracy validation for extracted data. Experience with security testing concepts (OWASP Top 10, SAST/DAST tooling integration, penetration test support). AWS Certifications or demonstrated experience validating AWS-hosted serverless architectures (Lambda, API Gateway, S3, RDS, SNS). Exposure to AI/ML model output validation or testing non-deterministic system outputs. ISTQB certification or equivalent structured quality engineering credential. Experience with contract or data transformation testing in healthcare interoperability contexts (HL7, FHIR). Work Environment/Physical Demands The work environment and physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. This is a remote position. While performing the duties of this job, the employee regularly works in a climate-controlled environment. Candidates must be able to sit, read, work on a computer, and watch a computer screen for extended periods of time. Occasionally required to stand, walk, use hands and fingers, kneel or crouch. Commence is an equal employment opportunity employer. All personnel processes are merit-based and applied without discrimination on the basis of race, color, religion, sex, sexual orientation, gender identity, marital status, age, disability, national or ethnic origin, military and veteran status or any other characteristic protected by applicable law. Commence is committed to providing equal employment opportunities to all applicants, including individuals with disabilities. If you require a reasonable accommodation to participate in the application process due to a disability, please contact Human Resources at (757) 306-4920 or hr@commence.ai. Please note that unless you are requesting an accommodation, all applications must be submitted through our online application system.

Establish and oversee cybersecurity, privacy, and compliance posture for a CMS case management program, advising leadership and embedding security controls into cloud and CI/CD pipelines. | Bachelor's degree and over 10 years cybersecurity experience with federal health programs and cloud security, proficient in FISMA, HIPAA, and NIST 800-53. | Description At Commence, we’re the start of a new age of data-centric transformation, elevating health outcomes and powering better, more efficient process to program and patient health. We combine quality data-driven solutions that fuel answers, technology that advances performance, and clinical expertise that builds trust to create a more efficient path to quality care. With human-centered, healthcare-relevant, and value-based solutions, we create new possibilities with data. We provide proof beyond the concept and performance beyond the scope with a focus on efficiencies that transform the lives of those we serve. With a culture driven by purpose, straightforward communication and clinical domain expertise, Commence cuts straight to better care.? The Security Lead will establish and oversee the cybersecurity, privacy, and compliance posture for a CMS case management program. You'll serve as the primary security advisor to program leadership, working closely with the Program Manager, Solutions Architect, Cloud Architect, DevSecOps team, and government security stakeholders to ensure security is embedded into every layer of the solution. Requirements Lead the program's cybersecurity strategy and ensure compliance with CMS ARS, FISMA, HIPAA/HITECH, NIST 800-53, and FedRAMP requirements Develop and maintain security plans, policies, and procedures aligned to federal standards Support Authority to Operate (ATO) activities and coordinate with government security officials and compliance auditors Manage Plan of Action and Milestones (POA&M) activities and maintain the program risk register Review and approve AWS cloud architecture designs, ensuring secure implementation of cloud-native services and security controls Enforce IAM policies, MFA, encryption at rest and in transit, network segmentation, and Zero Trust principles Embed security controls into CI/CD pipelines and validate cloud configurations against security baselines Implement automated scanning for source code, containers, Kubernetes workloads, Infrastructure as Code (IaC), and open-source dependencies Conduct security risk assessments and threat modeling; identify vulnerabilities and develop mitigation strategies Evaluate third-party and integration partner security risks Define data classification, handling, retention, and destruction requirements to protect PII and PHI Review interoperability and data-sharing solutions for HIPAA privacy compliance Develop and maintain incident response procedures and support SIEM-based monitoring and alerting strategies Coordinate response activities for security incidents and vulnerabilities Participate in Architecture Review Boards (ARBs) and review application, integration, data, and infrastructure designs for security gaps Ensure secure API and interoperability implementations across all integrated systems Qualifications Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field 10+ years of cybersecurity experience, including 2+ years supporting federal health programs 5+ years securing cloud-based solutions, including AWS Experience supporting healthcare or CMS-related systems Experience with ATO processes and federal compliance frameworks Experience leading security teams in Agile and DevSecOps environments Preferred Qualifications CISSP – Certified Information Systems Security Professional Preferred *Commence' headquarters are in Virginia Beach, VA, however we are open to remote candidates in the following states: AZ, AR, CO, DE, FL, GA, IL, IN, KS, KY, MA, MD, MI, MS, MO, MT, NC, NE, NV, NY, OH, OK, PA, SC, TN, TX, VA, DC, WI, and WV* Work Environment/Physical Demands The work environment and physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. This is a remote position. Candidates must be able to sit, read, work on a computer, and watch a computer screen for extended periods of time. Occasionally required to stand, walk, use hands and fingers, kneel or crouch. Commence is an equal employment opportunity employer. All personnel processes are merit-based and applied without discrimination on the basis of race, color, religion, sex, sexual orientation, gender identity, marital status, age, disability, national or ethnic origin, military and veteran status or any other characteristic protected by applicable law. Commence is committed to providing equal employment opportunities to all applicants, including individuals with disabilities. If you require a reasonable accommodation to participate in the application process due to a disability, please contact Human Resources at (757) 306-4920 or hr@commence.ai. Please note that unless you are requesting an accommodation, all applications must be submitted through our online application system.