QA Engineer

• 2 to 4 years of hands-on QA experience on web based products
• Good understanding of manual testing: test case writing, test scenarios, regression, smoke, sanity, cross browser and responsive testing
• Automation testing using Playwright, Cypress or Selenium with JavaScript or TypeScript
• API testing using Postman and Swagger, including auth, roles, payload and negative cases
• Basic MongoDB or SQL queries for data verification
• Defect logging and tracking in Jira or ClickUp with proper steps, screenshots and logs
• Understanding of Agile or Scrum process and sprint based testing
• Git basics, browser DevTools, ability to read application logs
• Good written English, as bug reports and release notes are shared with the client

Key Responsibilities

• Prepare test plans and test cases from requirement documents and keep traceability updated
• Perform functional and regression testing for each sprint release
• Write and maintain automation scripts for regression suite
• Test role based access for provider, group admin and platform admin users
• Verify that one organizations data is not visible to another organization
• Test document flow end to end: upload, extraction, verification, expiry reminders and generated PDFs
• Test payment and subscription flows in Stripe test mode, including webhooks and failed payment cases
• Do release testing on dev and staging, and smoke testing after production deployment
• Retest fixed defects and maintain regression cycle before every release

Security Testing

• Verify that PHI is not exposed in API responses, URLs, error messages, logs or browser storage
• Check access controls, session timeout and token expiry on all screens that show patient or provider data
• Verify audit logs capture who viewed or changed a record and that logs cannot be modified
• Check HTTPS, secure file download links and link expiry
• Verify data retention, soft delete and account deactivation behaviour
• Report any data exposure issue as high priority, not as a minor bug

Good to Have

• Experience on a HIPAA, SOC 2 or GDPR compliant product
• Healthcare domain knowledge (credentialing, provider onboarding, EHR, claims or insurance)
• Azure or AWS exposure and running automated tests in CI (GitHub Actions)
• Basic security testing knowledge (OWASP Top 10, broken access control, auth bypass)
• Performance testing using JMeter or k6
• ISTQB certification

Disclaimer: This job posting and location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.