About this role
QA Engineer
Experience: 2–4 Years Required Skills
- 2 to 4 years of hands-on QA experience on web based products
- Good understanding of manual testing: test case writing, test scenarios, regression, smoke, sanity, cross browser and responsive testing
- Automation testing using Playwright, Cypress or Selenium with JavaScript or TypeScript
- API testing using Postman and Swagger, including auth, roles, payload and negative cases
- Basic MongoDB or SQL queries for data verification
- Defect logging and tracking in Jira or ClickUp with proper steps, screenshots and logs
- Understanding of Agile or Scrum process and sprint based testing
- Git basics, browser DevTools, ability to read application logs
- Good written English, as bug reports and release notes are shared with the client
Key Responsibilities
- Prepare test plans and test cases from requirement documents and keep traceability updated
- Perform functional and regression testing for each sprint release
- Write and maintain automation scripts for regression suite
- Test role based access for provider, group admin and platform admin users
- Verify that one organization's data is not visible to another organization
- Test document flow end to end: upload, extraction, verification, expiry reminders and generated PDFs
- Test payment and subscription flows in Stripe test mode, including webhooks and failed payment cases
- Do release testing on dev and staging, and smoke testing after production deployment
- Retest fixed defects and maintain regression cycle before every release
Security Testing
- Verify that PHI is not exposed in API responses, URLs, error messages, logs or browser storage
- Check access controls, session timeout and token expiry on all screens that show patient or provider data
- Verify audit logs capture who viewed or changed a record and that logs cannot be modified
- Check HTTPS, secure file download links and link expiry
- Verify data retention, soft delete and account deactivation behaviour
- Report any data exposure issue as high priority, not as a minor bug
Good to Have
- Experience on a HIPAA, SOC 2 or GDPR compliant product
- Healthcare domain knowledge (credentialing, provider onboarding, EHR, claims or insurance)
- Azure or AWS exposure and running automated tests in CI (GitHub Actions)
- Basic security testing knowledge (OWASP Top 10, broken access control, auth bypass)
- Performance testing using JMeter or k6
- ISTQB certification