QA Engineer (VIT/HR/QAE/02/0926)

QA Engineer

Experience: 2–4 Years

Required Skills

• 2 to 4 years of hands-on QA experience on web based products
• Good understanding of manual testing: test case writing, test scenarios, regression, smoke, sanity, cross browser and responsive testing
• Automation testing using Playwright, Cypress or Selenium with JavaScript or TypeScript
• API testing using Postman and Swagger, including auth, roles, payload and negative cases
• Basic MongoDB or SQL queries for data verification
• Defect logging and tracking in Jira or ClickUp with proper steps, screenshots and logs
• Understanding of Agile or Scrum process and sprint based testing
• Git basics, browser DevTools, ability to read application logs
• Good written English, as bug reports and release notes are shared with the client

Key Responsibilities

• Prepare test plans and test cases from requirement documents and keep traceability updated
• Perform functional and regression testing for each sprint release
• Write and maintain automation scripts for regression suite
• Test role based access for provider, group admin and platform admin users
• Verify that one organization's data is not visible to another organization
• Test document flow end to end: upload, extraction, verification, expiry reminders and generated PDFs
• Test payment and subscription flows in Stripe test mode, including webhooks and failed payment cases
• Do release testing on dev and staging, and smoke testing after production deployment
• Retest fixed defects and maintain regression cycle before every release

Security Testing

• Verify that PHI is not exposed in API responses, URLs, error messages, logs or browser storage
• Check access controls, session timeout and token expiry on all screens that show patient or provider data
• Verify audit logs capture who viewed or changed a record and that logs cannot be modified
• Check HTTPS, secure file download links and link expiry
• Verify data retention, soft delete and account deactivation behaviour
• Report any data exposure issue as high priority, not as a minor bug

Good to Have

• Experience on a HIPAA, SOC 2 or GDPR compliant product
• Healthcare domain knowledge (credentialing, provider onboarding, EHR, claims or insurance)
• Azure or AWS exposure and running automated tests in CI (GitHub Actions)
• Basic security testing knowledge (OWASP Top 10, broken access control, auth bypass)
• Performance testing using JMeter or k6
• ISTQB certification