QA Engineer (VIT/HR/QAE/02/0926)

QA Engineer

Experience: 2–4 Years

Required Skills

• •2 to 4 years of hands-on QA experience on web based products
• •Good understanding of manual testing: test case writing, test scenarios, regression, smoke, sanity, cross browser and responsive testing
• •Automation testing using Playwright, Cypress or Selenium with JavaScript or TypeScript
• •API testing using Postman and Swagger, including auth, roles, payload and negative cases
• •Basic MongoDB or SQL queries for data verification
• •Defect logging and tracking in Jira or ClickUp with proper steps, screenshots and logs
• •Understanding of Agile or Scrum process and sprint based testing
• •Git basics, browser DevTools, ability to read application logs
• •Good written English, as bug reports and release notes are shared with the client

Key Responsibilities

• •Prepare test plans and test cases from requirement documents and keep traceability updated
• •Perform functional and regression testing for each sprint release
• •Write and maintain automation scripts for regression suite
• •Test role based access for provider, group admin and platform admin users
• •Verify that one organization's data is not visible to another organization
• •Test document flow end to end: upload, extraction, verification, expiry reminders and generated PDFs
• •Test payment and subscription flows in Stripe test mode, including webhooks and failed payment cases
• •Do release testing on dev and staging, and smoke testing after production deployment
• •Retest fixed defects and maintain regression cycle before every release

Security Testing

• •Verify that PHI is not exposed in API responses, URLs, error messages, logs or browser storage
• •Check access controls, session timeout and token expiry on all screens that show patient or provider data
• •Verify audit logs capture who viewed or changed a record and that logs cannot be modified
• •Check HTTPS, secure file download links and link expiry
• •Verify data retention, soft delete and account deactivation behaviour
• •Report any data exposure issue as high priority, not as a minor bug

Good to Have

• •Experience on a HIPAA, SOC 2 or GDPR compliant product
• •Healthcare domain knowledge (credentialing, provider onboarding, EHR, claims or insurance)
• •Azure or AWS exposure and running automated tests in CI (GitHub Actions)
• •Basic security testing knowledge (OWASP Top 10, broken access control, auth bypass)
• •Performance testing using JMeter or k6
• •ISTQB certification