QA Engineer (VIT/HR/TQA/01/1126)

Location: Pune, India

QA Engineer
Experience: 2–4 Years
Required Skills

• 2 to 4 years of hands-on QA experience on web based products

• Good understanding of manual testing: test case writing, test scenarios, regression, smoke, sanity, cross browser and responsive testing

• Automation testing using Playwright, Cypress or Selenium with JavaScript or TypeScript

• API testing using Postman and Swagger, including auth, roles, payload and negative cases

• Basic MongoDB or SQL queries for data verification

• Defect logging and tracking in Jira or ClickUp with proper steps, screenshots and logs

• Understanding of Agile or Scrum process and sprint based testing

• Git basics, browser DevTools, ability to read application logs

• Good written English, as bug reports and release notes are shared with the client

Key Responsibilities

• Prepare test plans and test cases from requirement documents and keep traceability updated

• Perform functional and regression testing for each sprint release

• Write and maintain automation scripts for regression suite

• Test role based access for provider, group admin and platform admin users

• Verify that one organization's data is not visible to another organization

• Test document flow end to end: upload, extraction, verification, expiry reminders and generated PDFs

• Test payment and subscription flows in Stripe test mode, including webhooks and failed payment cases

• Do release testing on dev and staging, and smoke testing after production deployment

• Retest fixed defects and maintain regression cycle before every release

Security Testing

• Verify that PHI is not exposed in API responses, URLs, error messages, logs or browser storage

• Check access controls, session timeout and token expiry on all screens that show patient or provider data

• Verify audit logs capture who viewed or changed a record and that logs cannot be modified

• Check HTTPS, secure file download links and link expiry

• Verify data retention, soft delete and account deactivation behaviour

• Report any data exposure issue as high priority, not as a minor bug

Good to Have

• Experience on a HIPAA, SOC 2 or GDPR compliant product

• Healthcare domain knowledge (credentialing, provider onboarding, EHR, claims or insurance)

• Azure or AWS exposure and running automated tests in CI (GitHub Actions)

• Basic security testing knowledge (OWASP Top 10, broken access control, auth bypass)

• Performance testing using JMeter or k6

• ISTQB certification