Job Title: QA Engineer / Software Quality & Security Tester
Location: Gurgaon / Gurugram
Employment Type: Full-Time
Experience: 2–5 Years
Industry: Technology / Real Estate Technology / Mobile Applications
Job Summary
We are looking for a QA Engineer / Software Tester responsible for end-to-end quality testing of our Mobile Application, Web Application, Admin Panel, Backend APIs and supporting systems before production release.
The candidate will be responsible for identifying functional issues, UI/UX defects, API problems, performance bottlenecks, security vulnerabilities and other potential production risks. The role requires strong hands-on testing skills across mobile, web, backend and API environments.
Key Responsibilities
Perform complete functional and regression testing of mobile applications and web/admin panels.
Test Android/iOS application flows across different devices, screen sizes and OS versions.
Test Admin Panel, Backend and database-driven functionalities.
Perform comprehensive API testing including Request/response validation, Authentication & authorization, Status codes, Data validation, Error handling, Invalid/malicious input testing, Rate-limit and abuse-case testing.
Conduct load, stress, performance and concurrent-user testing to evaluate how the application behaves under visitor/user load.
Identify API/server bottlenecks, slow response times, timeout issues and scalability problems.
Perform complete UI testing including layout, responsiveness, navigation, forms, buttons, pop-ups, notifications and device compatibility.
Perform database testing including data integrity, transactions, permissions and consistency.
Conduct application security testing and identify vulnerabilities such as SQL Injection, , XSS, Broken authentication, Broken authorization / access-control issues, IDOR / insecure direct object references, API security vulnerabilities, Session/token vulnerabilities, Improper input validation, Sensitive data exposure, File upload vulnerabilities, Rate-limit / brute-force weaknesses
Other OWASP Top 10 related vulnerabilities
Test different user roles and ensure users cannot access unauthorized features, APIs or data.
Perform negative testing and edge-case testing to identify scenarios that normal functional testing may miss.
Test application behavior during poor internet connectivity, server errors, API failures, expired sessions and unexpected inputs.
Verify bug fixes and perform regression testing before every major release.
Prepare detailed test cases, test scenarios, test reports and defect reports.
Classify issues based on severity and business impact.
Maintain a pre-production QA checklist and release sign-off report.
Work closely with developers to reproduce, document and resolve defects.
Conduct final Production Readiness / Go-Live Testing before deployment.
Required Skills
Strong knowledge of Manual Testing / Software QA
Mobile Application Testing Android and IOS
Web Application Testing
Admin Panel Testing
REST API Testing
Postman or similar API testing tools
SQL / Database testing
Performance and Load Testing
Basic to intermediate application security testing
Knowledge of OWASP Top 10
Understanding of authentication, authorization, JWT/session management and API security
Bug tracking and test management tools
Strong understanding of SDLC and STLC
Excellent analytical and problem-solving skills
Preferred Tools / Technologies
Experience with tools such as:
Postman | JMeter / k6 | Burp Suite | OWASP ZAP | Browser DevTools | SQL | Jira / similar bug tracking tools
Automation testing experience using Selenium, Playwright, Cypress, Appium or similar tools will be an advantage.
Candidate Profile
The ideal candidate should be someone who does not only verify whether a feature "works", but actively tries to determine how it can fail, break, be misused, become slow under load, or be accessed in an unauthorized manner.
The candidate should have a strong testing mindset and be comfortable testing both normal and abnormal user behavior.
Key Deliverable Before Go-Live
The selected candidate will be responsible for providing a structured QA & Production Readiness Report covering:
Functional Testing
Regression Testing
Mobile Testing
Web/Admin Testing
API Testing
Database Testing
UI/UX Testing
Performance & Load Testing
Security Testing
Access-Control Testing
Vulnerability Testing
Negative & Edge-Case Testing
Final Bug Status
Critical/High-Risk Issue Status
Go-Live Recommendation / QA Sign-Off
Important: The role involves authorized security testing of our own application and infrastructure. The candidate must follow responsible testing practices and must not perform unauthorized testing on third-party systems.
Work Location: In person