QA Engineer / Software Quality & Security Tester

Job Title: QA Engineer / Software Quality & Security Tester

Location: Gurgaon / Gurugram
Employment Type: Full-Time
Experience: 2–5 Years
Industry: Technology / Real Estate Technology / Mobile Applications

Job Summary

We are looking for a QA Engineer / Software Tester responsible for end-to-end quality testing of our Mobile Application, Web Application, Admin Panel, Backend APIs and supporting systems before production release.

The candidate will be responsible for identifying functional issues, UI/UX defects, API problems, performance bottlenecks, security vulnerabilities and other potential production risks. The role requires strong hands-on testing skills across mobile, web, backend and API environments.

Key Responsibilities

• Perform complete functional and regression testing of mobile applications and web/admin panels.
• Test Android/iOS application flows across different devices, screen sizes and OS versions.
• Test Admin Panel, Backend and database-driven functionalities.
• Perform comprehensive API testing including Request/response validation, Authentication & authorization, Status codes, Data validation, Error handling, Invalid/malicious input testing, Rate-limit and abuse-case testing.
• Conduct load, stress, performance and concurrent-user testing to evaluate how the application behaves under visitor/user load.
• Identify API/server bottlenecks, slow response times, timeout issues and scalability problems.
• Perform complete UI testing including layout, responsiveness, navigation, forms, buttons, pop-ups, notifications and device compatibility.
• Perform database testing including data integrity, transactions, permissions and consistency.
• Conduct application security testing and identify vulnerabilities such as SQL Injection, , XSS, Broken authentication, Broken authorization / access-control issues, IDOR / insecure direct object references, API security vulnerabilities, Session/token vulnerabilities, Improper input validation, Sensitive data exposure, File upload vulnerabilities, Rate-limit / brute-force weaknesses

Other OWASP Top 10 related vulnerabilities

• Test different user roles and ensure users cannot access unauthorized features, APIs or data.
• Perform negative testing and edge-case testing to identify scenarios that normal functional testing may miss.
• Test application behavior during poor internet connectivity, server errors, API failures, expired sessions and unexpected inputs.
• Verify bug fixes and perform regression testing before every major release.
• Prepare detailed test cases, test scenarios, test reports and defect reports.
• Classify issues based on severity and business impact.
• Maintain a pre-production QA checklist and release sign-off report.
• Work closely with developers to reproduce, document and resolve defects.
• Conduct final Production Readiness / Go-Live Testing before deployment.

Required Skills

• Strong knowledge of Manual Testing / Software QA
• Mobile Application Testing Android and IOS
• Web Application Testing
• Admin Panel Testing
• REST API Testing
• Postman or similar API testing tools
• SQL / Database testing
• Performance and Load Testing
• Basic to intermediate application security testing
• Knowledge of OWASP Top 10
• Understanding of authentication, authorization, JWT/session management and API security
• Bug tracking and test management tools
• Strong understanding of SDLC and STLC
• Excellent analytical and problem-solving skills

Preferred Tools / Technologies

Experience with tools such as:

Postman | JMeter / k6 | Burp Suite | OWASP ZAP | Browser DevTools | SQL | Jira / similar bug tracking tools

Automation testing experience using Selenium, Playwright, Cypress, Appium or similar tools will be an advantage.

Candidate Profile

The ideal candidate should be someone who does not only verify whether a feature "works", but actively tries to determine how it can fail, break, be misused, become slow under load, or be accessed in an unauthorized manner.

The candidate should have a strong testing mindset and be comfortable testing both normal and abnormal user behavior.

Key Deliverable Before Go-Live

The selected candidate will be responsible for providing a structured QA & Production Readiness Report covering:

• Functional Testing
• Regression Testing
• Mobile Testing
• Web/Admin Testing
• API Testing
• Database Testing
• UI/UX Testing
• Performance & Load Testing
• Security Testing
• Access-Control Testing
• Vulnerability Testing
• Negative & Edge-Case Testing
• Final Bug Status
• Critical/High-Risk Issue Status
• Go-Live Recommendation / QA Sign-Off

Important: The role involves authorized security testing of our own application and infrastructure. The candidate must follow responsible testing practices and must not perform unauthorized testing on third-party systems.

Pay: ₹30,000.00 - ₹40,000.00 per month

Work Location: In person