QA Engineer

Experience: 2–4 Years
Required Skills
  • 2 to 4 years of hands-on QA experience on web based products
  • Good understanding of manual testing: test case writing, test scenarios, regression, smoke, sanity, cross browser and responsive testing
  • Automation testing using Playwright, Cypress or Selenium with JavaScript or TypeScript
  • API testing using Postman and Swagger, including auth, roles, payload and negative cases
  • Basic MongoDB or SQL queries for data verification
  • Defect logging and tracking in Jira or ClickUp with proper steps, screenshots and logs
  • Understanding of Agile or Scrum process and sprint based testing
  • Git basics, browser DevTools, ability to read application logs
  • Good written English, as bug reports and release notes are shared with the client
Key Responsibilities
  • Prepare test plans and test cases from requirement documents and keep traceability updated
  • Perform functional and regression testing for each sprint release
  • Write and maintain automation scripts for regression suite
  • Test role based access for provider, group admin and platform admin users
  • Verify that one organization's data is not visible to another organization
  • Test document flow end to end: upload, extraction, verification, expiry reminders and generated PDFs
  • Test payment and subscription flows in Stripe test mode, including webhooks and failed payment cases
  • Do release testing on dev and staging, and smoke testing after production deployment
  • Retest fixed defects and maintain regression cycle before every release
Security Testing
  • Verify that PHI is not exposed in API responses, URLs, error messages, logs or browser storage
  • Check access controls, session timeout and token expiry on all screens that show patient or provider data
  • Verify audit logs capture who viewed or changed a record and that logs cannot be modified
  • Check HTTPS, secure file download links and link expiry
  • Verify data retention, soft delete and account deactivation behaviour
  • Report any data exposure issue as high priority, not as a minor bug
Good to Have
  • Experience on a HIPAA, SOC 2 or GDPR compliant product
  • Healthcare domain knowledge (credentialing, provider onboarding, EHR, claims or insurance)
  • Azure or AWS exposure and running automated tests in CI (GitHub Actions)
  • Basic security testing knowledge (OWASP Top 10, broken access control, auth bypass)
  • Performance testing using JMeter or k6
  • ISTQB certification