QA Automation & VAPT Engineer

Quality Assurance & Test Automation

• Design, develop, and maintain automated test frameworks for web applications, APIs, and microservices.
• Create and execute functional, integration, regression, smoke, and end-to-end test cases.
• Automate API testing using industry-standard tools and frameworks.
• Validate application functionality against business and technical requirements.
• Perform database validation and data integrity testing.
• Identify, track, and verify software defects through closure.
• Participate in sprint planning, release validation, and quality sign-off activities.
• Develop and maintain quality metrics, test reports, and release readiness reports.

Security Testing & VAPT

• Conduct Vulnerability Assessments and Penetration Testing (VAPT) for web applications, APIs, cloud infrastructure, and enterprise platforms.
• Perform authenticated and unauthenticated vulnerability scans.
• Execute web application penetration testing aligned with OWASP Top 10 standards.
• Conduct API security testing, authentication testing, authorization testing, and business logic validation.
• Identify security vulnerabilities and provide remediation recommendations.
• Validate security fixes through re-testing and verification.
• Collaborate with engineering teams to implement secure coding practices.
• Participate in threat modeling, risk assessments, and security reviews.

Cloud & Infrastructure Validation

• Test applications deployed in AWS, Azure, or GCP environments.
• Assess Kubernetes, Docker, and cloud-native deployments from quality and security perspectives.
• Verify cloud security configurations, IAM policies, encryption controls, and logging mechanisms.
• Support DevSecOps initiatives and security automation within CI/CD pipelines.

AI/GenAI Platform Validation (Preferred)

• Test AI-powered applications, Agentic AI workflows, and LLM-based systems.
• Validate prompt behavior, response quality, and business logic execution.
• Perform security testing of AI applications including prompt injection, data leakage, and access control validation.
• Support evaluation and monitoring of AI system performance.

Required Skills

QA & Automation

• Strong experience in Test Automation using:
• Selenium
• Playwright
• Pytest
• Experience testing:
• Web Applications
• REST APIs
• Microservices
• Databases
• Strong understanding of:
• SDLC
• STLC
• Agile/Scrum methodologies
• Defect lifecycle management

Security Testing & VAPT

• Hands-on experience performing:
• Vulnerability Assessment
• Penetration Testing
• API Security Testing
• Security Validation
• Strong understanding of:
• OWASP Top 10
• Secure SDLC
• Threat Modeling
• Authentication & Authorization Security
• Session Management Security
• Experience with:
• Burp Suite Professional
• OWASP ZAP
• Nessus
• Nmap
• Metasploit
• Wireshark

Programming & Scripting

• Python (Preferred)
• JavaScript/TypeScript
• Bash or PowerShell scripting
• SQL