About us
The physical and digital worlds are merging. Vehicles, medical devices, industrial systems, critical infrastructure: security hasn't kept pace. AI is accelerating everything, from the capabilities of the systems we depend on to the sophistication of the threats targeting them. A software vulnerability can now have physical consequences. A physical breach can compromise entire digital ecosystems. Billions of devices operate with little to no protection, and traditional approaches can't keep up. Not at this scale, not at this speed, and not across this diversity of systems.
Exein exists to solve this. We build the security layer for a world where physical and digital threats are no longer separate problems, from kernel-level runtime protection on embedded devices to cloud-native platforms that analyze, protect, and prove compliance across entire device fleets. We're not patching the old model. We're building security from the core out.
Job Overview
We're hiring our first dedicated QA Lead to own quality across Exein's two flagship products: the Analyzer platform (point-in-time firmware, container, and SBOM security scanning, with CVE and compliance analysis) and the Runtime platform (live threat detection ingesting telemetry from a fleet of on-device agents, from eBPF on Linux to RTOS targets like ESP32, Zephyr, and FreeRTOS).
Both products span the full stack: Rust microservices, Next.js web apps, CLIs, and security agents running everywhere from the cloud to constrained embedded hardware. There's already meaningful ground to build on — Robot Framework/Playwright E2E suites, Rust unit and BDD tests, a multi-backend Runtime Test Framework, and CI/CD across dev, stage, and prod. What's missing is someone to own the discipline end to end: to define the strategy, raise the bar, close the coverage gaps, and make release quality a signal the whole company can trust.
This is a hands-on leadership role. You'll set the direction and write the automation. Over time, and with impact, it's the seed of a QA function you can grow.
What you'll do
- Own the QA strategy across Analyzer and Runtime — define what "release-ready" means, establish quality gates, and make them enforceable in CI/CD rather than aspirational.
- Build and extend automated test suites across the stack: API and integration tests for Rust microservices, E2E tests for Next.js frontends (Robot Framework/Playwright), CLI tests, and BDD scenarios — expanding coverage where it's thin and hardening what exists.
- Prevent production incidents by systematically closing the gaps where they originate: front-end edge cases, FE/BE integration mismatches, and issues surfacing against real customer data shapes and scale.
- Build cross-cutting regression coverage so changes in one area of the platform don't silently break another — a CLI release doesn't break Compliance, a new backend endpoint doesn't break CVE retrieval, an Analyzer change doesn't degrade Runtime flows.
- Design test strategy for hard-to-test surfaces — multi-tenant/RBAC boundaries, event-driven pipelines (NATS), LLM-enriched analysis, SBOM/CVE accuracy, and behavior on constrained embedded hardware and emulators (QEMU, Yocto).
- Make quality visible — flakiness, coverage, escaped defects, release confidence — and drive those metrics down (or up) over time.
- Partner with engineering as the quality conscience of the release process: shift testing left, sharpen bug reports and reproductions, and shape a pragmatic release/regression cadence across both products.
- Lay the foundation for a QA function — set the standards, tooling, and playbooks a future team can scale on, and mentor engineers on testing practice along the way.
- Grow the Runtime Test Framework so security-detection rules are validated consistently across every backend and agent type (container, VM, cloud, and real/emulated embedded targets), catching detection regressions before customers do.
What we're looking for
- Several years in QA/test engineering, including ownership of test automation (not just manual or exploratory testing) for a production software product.
- Strong automation skills — comfortable reading and writing code, building test suites, and integrating them into CI/CD (GitHub Actions or similar). You debug failing tests to root cause, not just report red.
- Hands-on experience testing both APIs/backends and web frontends,, and comfort at the boundaries: integration, E2E, contract, and regression testing.
- A systems mindset — you can reason about distributed services, event-driven architectures, auth/multi-tenancy, and where the risky seams are.
- Fluency with modern test tooling (e.g. Playwright,, Robot Framework, Cypress, BDD/Cucumber-style frameworks, or equivalents) and a pragmatic view on when to automate vs. when not to.
- Ability to set direction independently in a fast-moving environment and turn ambiguity into a concrete, prioritized quality plan.
- Excellent written communication — remote-first, async-friendly, precise bug reports and clear rationale.
- Experience with regression strategy for platforms with multiple interacting components — designing test coverage that catches cross-cutting breakage without slowing down releases.
Nice to have:
- Exposure to security, embedded/IoT, or systems software — helpful for understanding what our platform is testing against, though you won't be testing these systems directly in this role.
- Familiarity with Rust (or willingness to learn enough to test Rust services effectively).
- Experience testing on hardware, emulators, or virtualized targets (QEMU, Vagrant, EC2/SSM, Yocto/embedded Linux, RTOS).
- Experience being an early/first QA hire and building the discipline from the ground up.
Why join Exein
- Real-world stakes. Your work protects devices where a missed defect can have physical, not just digital, consequences — vehicles, medical devices, industrial and critical infrastructure.
- Breadth you won't find elsewhere. From cloud-native Rust platforms to kernel-level and RTOS security agents, you'll test across a range of systems most QA engineers never touch.
- Real ownership. You're not inheriting someone else's process — you're defining the quality bar for the whole company, with the mandate to grow it into a function.
- Serious engineering culture. Rust-first services, DDD, AI-assisted development, and strong CI/CD — a team that already cares about quality and wants a leader to take it further.
- Fully remote, mission-driven team. Building security from the core out, at the exact moment the physical and digital worlds are colliding.
Location: Fully-remote (EMEA)
Salary range: €70K - 100K
Exein is committed to creating an inclusive workplace. We evaluate all applications fairly regardless of gender, age, ethnicity, background, or orientation.
