QA Engineer (Automation) – Web, Mobile & Security

Design, implement, and maintain automation testing frameworks for web and mobile applications, while actively validating application security risks as part of the QA process. This role is engineering‐focused, not manual‐only QA.

Roles & Responsibilities

1. Automation Testing – Web Applications:

  • Design and maintain automation test suites for web apps
  • Automate critical flows (auth, payments, dashboards, roles)
  • Cross‐browser automation (Chrome, Firefox, Safari)
  • Maintain selectors, waits, and stable test execution
  • Debug flaky tests and CI failures

2. Automation Testing – Mobile Applications (Android & iOS):

  • Automate mobile test cases using Appium / Detox
  • Validate app lifecycle scenarios (install, upgrade, permissions)
  • Handle background/foreground and network changes
  • Execute automation on real devices (emulator‐only is not enough)

3. API Automation Testing:

  • Automate REST API testing (request/response validation)
  • Validate authentication, authorization, and data integrity
  • Support backend testing independent of UI
  • Integrate API tests with CI pipelines

4. Security Testing (Automation + Manual):

  • Perform basic to intermediate security testing, including:
  • Authentication & authorization validation
  • Role‐based access control checks
  • Input validation & injection testing (SQL, XSS basics)
  • Session handling & token security
  • Use tools like: OWASP ZAP / Burp Suite (basic to intermediate)
  • Identify, report, and validate security vulnerabilities
  • Work with developers to retest and verify security fixes
  • This is application security testing, not full penetration testing.

5. CI/CD & Quality Ownership:

  • Integrate automation into CI/CD pipelines
  • Analyze test failures and provide clear root‐cause analysis
  • Maintain test data and environments
  • Actively improve test strategy and coverage

Required Skills

1. Automation & Programming

  • Strong hands‐on experience with:
  • Playwright / Cypress / Selenium (Web)
  • Appium / Detox (Mobile)
  • Programming knowledge: JavaScript (preferred) / Java / Python
  • Solid understanding of automation best practices

2. Security Testing

  • Understanding of OWASP Top 10
  • Experience testing auth, roles, APIs, and session security
  • Hands‐on exposure to security testing tools
  • Ability to think like an attacker (within scope)

3. Tools & Process

  • Git & version control
  • CI/CD (Jenkins / GitHub Actions / GitLab)
  • Bug tracking (Jira or equivalent)

Nice to Have

  • Experience with cloud‐based apps (AWS preferred)
  • Knowledge of token‐based auth (JWT, OAuth)
  • BDD / POM framework exposure
  • Startup or SaaS product experience