Open to opportunities

Firdose Kazi

@firdosekazi

I strengthen application security, compliance, and audit readiness through QA, access-control validation, and risk-focused testing.

United States

Message

What I'm looking for

I'm seeking a cybersecurity GRC or cybersecurity analyst role where I can apply my QA, access-control, compliance, and audit-readiness experience while continuing to build expertise in ISO 27001, NIST, PCI-DSS, HIPAA, and SOC 2.

I'm transitioning into cybersecurity GRC after 17+ years in QA and application support, using security-focused testing, system analysis, and compliance work to help protect applications and sensitive data.

At BeWell, I review specifications for security gaps, build test scenarios around security controls and data protection, and validate MFA, RBAC, session timeouts, and secure handling of customer PII.

At Wells Fargo, I validated PCI-DSS compliance for the Bills Pay Module, performed access reviews and audit checks, and executed functional and regression testing using JavaScript, BDD, Gherkin, Cucumber, and BrowserStack. At Presence, I helped protect student PII and spearheaded RBAC and MFA implementation while validating access provisioning and revocation policies.

My experience also includes access-control administration at Cadent, Selenium and Java test automation, incident-response documentation at VMware, and SOX compliance auditing. I'm building deeper expertise in ISO 27001, NIST, PCI-DSS, HIPAA, and SOC 2 to support risk assessments, security governance, and audit readiness.

Experience

Work history, roles, and key accomplishments

Current

User Acceptance & Validation Analyst

Current

BeWell

Apr 2025 - Present (1 year 4 months)

Reviewed system and functional specifications to identify security gaps and translated them into test scenarios. Designed and executed test cases focusing on security controls, access validations, and data protection.

Security Testing Test Case Design Functional Testing Integration Testing Regression Testing MFA RBAC

Software Development in Test

Wells Fargo

May 2023 - Jul 2023 (2 months)

Validated compliance with security standards including PCI-DSS for the Bills Pay Module. Performed access reviews and audit checks, and executed functional and regression testing using automated tools.

PCI DSS Access Reviews Audit Functional Testing Regression Testing JavaScript BDD Gherkin Cucumber BrowserStack

Principal IT Assurance Engineer

Presence

Dec 2020 - Mar 2023 (2 years 3 months)

Protected student PII data and implemented RBAC and MFA to enhance security compliance. Validated access policies and oversaw feature and bug releases.

PII Policies RBAC MFA Access Control Compliance Release Management Stakeholder Coordination

Software Test Engineer

Cadent

Jun 2011 - Jan 2015 (3 years 7 months)

Contributed to test strategy and planning, designed test cases, and executed functional and regression testing. Automated test cases using Selenium and Java, and administered access control systems.

Test Strategy Test Planning Test Case Design Functional Testing Regression Testing Selenium Java Page Object Model Access Control

Application Support Engineer

VMware

Jan 2006 - Apr 2011 (5 years 3 months)

Resolved customer issues related to the VMware Store, refined technical documentation, and monitored servers. Trained incident response teams and audited SOX compliance.

Technical Support Documentation Scripting Incident Response SOX Compliance