Job title: Head of Software Testing
Employment status: Full-time
Location: Vienna, Austria – Hybrid
Compensation: Competitive compensation + performance-based bonus and equity options
Benefits: Wiener Linien ticket, yearly company retreat, regular team events, free in-office lunch, drinks & snacks

About Ketryx

At Ketryx, we’re on a mission to help medical software teams build secure, reliable applications that make a real difference in people’s lives. We give them the tools to automate the tough parts of compliance and quality so they can focus on what matters most: creating life-saving products with confidence.

The Role

As Head of Software Testing, you’ll define and execute our quality strategy, ensuring that every release of our platform meets the highest standards of safety, reliability, performance, and compliance. You’ll lead a talented team of software quality engineers, testing product features and strengthening our automated testing frameworks, and play a vital role in helping medical device companies bring high-quality technology to market faster. As a quality professional, you will have an impact on our own product that you will also use on a daily basis.

About You

You’re a proven leader in software quality who knows how to build high-performing teams and scalable testing systems. You combine a deep passion for reliability with strong communication skills and a collaborative mindset. You’re detail-oriented, enjoy uncovering edge cases, and take pride in building reliable, maintainable automated tests. You thrive in fast-moving environments where you can influence processes, improve standards, and shape product direction. Above all, you’re motivated to apply your expertise to technology that directly improves patient outcomes.

Ideally you're already located in Vienna or able to relocate quickly. Unfortunately, we are unable to support people without an existing work permit for this position in Austria at this time.

What You’ll Do

• Lead and grow the quality engineering team
• Plan and coordinate verification & validation for software releases and other testing activities
• Drive scaling up of automated testing with a team using Playwright, TypeScript, Cucumber
• Work with the team to keep CI/CD pipelines fast and reliable
• Coordinate work between different teams such as Engineering, DevOps, Product, Customer Success, and Sales, representing the quality and test engineering team
• Own verification & validation for software releases
• Apply quality principles at scale
• Perform risk management
• Prepare and field audits (IEC 62304 & co.)
• Champion a quality-first culture across product and engineering
• Define, track, and share goals and metrics for test automation & product quality, to keep leadership and stakeholders informed and to identify areas for improvement

What We’re Looking For

Must-Haves

• Extensive experience (10+ years) in software quality and testing, with at least 5 years in leadership
• Experience in a high-growth company
• Experience in establishing and running processes to improve overall quality
• Hands-on experience with TypeScript or JavaScript
• Practical experience with test automation tools such as Playwright or Cypress
• Strong knowledge of software QA methodologies, tools, and processes
• Familiarity with BDD practices, ideally using Cucumber
• Experience working in an early stage, product-based start up.

Nice-to-Haves

• Experience preparing for and managing audits
• Experience working in a regulated industry such as MedTech, healthcare, finance, automotive, or aerospace
• Experience using test case management tools such as Xray, TestRail, Azure DevOps, or HP ALM
• Experience with performance and security testing
• Knowledge of ISO 13485 / IEC 62304

Compensation & Benefits

• At Ketryx, we offer a competitive compensation package that reflects your experience and skills. The annual gross salary starts at €100,000+ based on an all-in contract. Final compensation is tailored to your qualifications and experience.
• In addition to the base salary, our package includes a performance-based bonus and stock options, aligning your success with the company’s growth.
• Lunch, snacks, and coffee provided in-office
• Annual Wiener Linien public transportation pass
• Yearly company retreat and regular team events

Keywords: quality lead, test automation engineer, QA, Verification & Validation, V-Model, change request, change requirement, regulation, feature descriptions, SaaS, customer feedback, computer science, comp sci, startup, software development, Series A, Series B, technology, software

Your mission

Join Bitpanda as a Senior DevOps Engineer and take a leading role in shaping the next generation of our high-performance, cloud-native infrastructure that powers the future of digital finance. As a senior member of the team, you will drive architectural decisions, mentor and guide junior engineers, and ensure our platforms remain secure, scalable, and resilient. You’ll work with a motivated group of highly skilled engineers, contributing your experience while continuing to grow in a cutting-edge, fast-moving environment.

What You’ll Do

• Design, develop, and evolve our AWS-based infrastructure using best-in-class tooling, including Terraform/CloudFormation and ArgoCD, leading the operation and optimisation of our container orchestration platforms, with a focus on multi-cluster networking and service-to-service communication.
• Take ownership of our cross-cluster Istio service mesh—implementing policies, improving traffic management, and enhancing mesh-level networking performance and security
• Monitor, optimise, and automate systems to ensure high availability, strong security posture, and superior performance using Datadog, Opsgenie, and AI-powered tooling
• Build scalable, robust solutions for complex technical challenges, ensuring infrastructure design aligns with best practices and long-term platform goals.
• Mentor junior and mid-level engineers, promote engineering excellence, and contribute to team knowledge sharing and process improvements.

Who You Are

• 5+ years of hands-on experience building and managing AWS infrastructure (EC2, VPC, IAM, RDS, KMS, and related services).
• Strong expertise in Docker, Kubernetes, and Infrastructure as Code (Terraform/CloudFormation).
• Advanced understanding of cloud networking, including routing, load balancing, VPC design, hybrid connectivity, and service-mesh-based networking - familiarity with multi-cluster service mesh (Istio) and related capabilities is preferred
• Proficiency in CI/CD systems, with deep experience in GitLab CI/CD and working knowledge of ArgoCD.
• Proven experience deploying, maintaining, and scaling critical cloud infrastructure components in production environments.

** We offer a comprehensive relocation package to support candidates who are moving to join our team. Our goal is to make your transition as smooth as possible, and we provide assistance throughout the whole process.

Your Mission

As an Offensive Security Engineer, you’ll act as an in-house attacker; finding and proving the risks that matter before anyone else can. You’ll play a key role in helping us build secure-by-default products by bringing an offensive mindset into everyday engineering decisions.

Working closely with engineers, product managers, and DevOps, you’ll uncover real-world attack paths, challenge assumptions, and help teams fix issues in a practical, scalable way. If you enjoy getting hands-on, digging deep into systems, and turning complex vulnerabilities into clear action, this is where you’ll thrive.

What you'll do

• Perform in-depth penetration tests across web apps, APIs, and infrastructure—going beyond automated tools to uncover meaningful flaws
• Develop clear, impactful PoCs that demonstrate real risk and help teams prioritize fixes effectively
• Collaborate closely with engineers to guide remediation and validate fixes through re-testing
• Contribute to threat modeling and design reviews, helping identify security gaps early in the SDLC
• Build and refine scripts, tools, and testing approaches to improve coverage and efficiency

Who you are

• 3–5+ years of hands-on experience in offensive security, penetration testing, or product security
• Strong understanding of common vulnerabilities (OWASP Top 10, SANS 25) and how they manifest in real systems
• Practical, hands-on mindset; comfortable testing, exploiting, and explaining vulnerabilities end-to-end
• Able to clearly communicate technical findings and recommended fixes to engineering teams
• Curious and persistent; you enjoy digging deeper, connecting dots, and understanding how things break

Your Mission
You operate as a trusted adversary within our systems identifying, exploiting, and helping eliminate the risks that matter most. You don’t just find vulnerabilities; you shape how we think about security at a product and platform level.

You’ll embed offensive thinking across the SDLC, partnering with engineering, product, and DevOps to challenge designs, raise the bar, and ensure we’re secure by default, not by accident.

If you’re the kind of person who sees an attack path where others see “low risk,” and you know how to turn that into real change, you’ll feel right at home.

What you'll do

• Lead sophisticated, end-to-end penetration tests across complex systems; uncovering deep, chained vulnerabilities others miss
• Design and demonstrate impactful exploit scenarios that drive prioritisation at both engineering and leadership levels
• Own offensive security engagements from scoping through remediation validation, acting as the technical authority
• Influence architecture through threat modeling and design review; shifting security left and preventing classes of vulnerabilities
• Build and evolve offensive tooling, methodologies, and playbooks to scale security testing across teams

Who you are

• 5+ years in offensive security with a proven track record of finding high-impact, non-trivial vulnerabilities in real-world systems
• Strong depth in application and product security, with the ability to think across layers (app, API, infra, auth, logic)
• Recognised for your hands-on expertise; whether through certifications (OSCP, OSWE, GPEN) or demonstrated offensive work
• Able to influence without authority; translating complex attack paths into clear, actionable risk for diverse stakeholders
• Naturally curious and adversarial; you think in attack chains, not isolated bugs, and push until you find what really matters