correctness engineer