Quality Assurance Engineer

Company Description FlowVector.AI builds agentic AI systems that think, decide, and act so teams can focus on high-value human work. The company designs and deploys autonomous AI agents that understand business goals, reason through complex workflows, and execute tasks across existing tools and systems within defined guardrails. These agents support functions such as operations, sales, support, and finance by handling repetitive, time-consuming tasks. Every system is engineered for reliability, transparency, and measurable impact, enabling organizations to scale with confidence while maintaining control.

*JOB DESCRIPTION*

We're looking for a QA Engineer to own quality across a modern, cloud-native platform that

integrates AI-powered automation into business workflows. You'll work on a small, focused team

where testing spans well beyond typical UI QA — API-level testing, AI guardrail validation, and

security-adjacent checks are all part of the job, not edge cases.

This is a hands-on, independent role on a lean team. You'll be the primary quality owner, working

closely with the architect and developers from design through deployment, not managing a QA

team.

KEY RESPONSIBILITIES

Design and execute test plans covering both deterministic workflow logic and AI agent

behaviour.

Perform functional, regression, and exploratory testing across web frontends and backend APIs.

Validate AI-specific safety controls: PII detection, prompt-injection resistance, content safety

checks, and response grounding — testing that the guardrails actually catch what they're

supposed to catch, not just that the API returns 200.

Test segregation-of-duties enforcement end to end — confirming an agent that requests an

action can never also be the one that approves it.

Test the AI Gateway's cost and rate controls: per-workflow token caps, correct 429 behaviour on

breach, and the kill-switch path (including that a critical alert genuinely triggers autoremediation).

Conduct thorough API testing (Postman or similar) against REST and tool-call interfaces.

Design, build, and maintain automated test suites (Playwright, Cypress, or similar) for the web

frontends, integrated into CI/CD.

Perform load testing against realistic multi-workflow volume assumptions, not just singleendpoint

benchmarks.

Identify, document, and track defects clearly, working directly with a small developer team

through resolution.

Review requirements and workflow designs early to flag ambiguities, edge cases, and testability

concerns before development starts.

REQUIRED QUALIFICATIONS

3+ years of experience in software quality assurance, with both manual and automation

testing.

Proven experience testing web applications and backend APIs (mobile testing is not part of this

role).

Hands-on experience with at least one automation framework (Playwright, Cypress,

Selenium, or equivalent).

Solid understanding of the software testing lifecycle (STLC), test case design techniques, and

bug tracking tools (Jira, Linear, or similar).

Experience with API testing tools such as Postman or similar.

Comfortable working with a cloud platform (Azure strongly preferred) — able to test against

and debug issues involving managed Kubernetes, cloud databases, and API gateways, not just a

black-box UI.

Familiarity with CI/CD tools (GitHub Actions, Azure Pipelines, Jenkins, or similar) and integrating

automated tests into pipelines.

Strong analytical skills and meticulous attention to detail.

Excellent written communication — comfortable documenting findings clearly for a small, fully

remote team.

Ability to work independently and take ownership of quality outcomes with minimal supervision.

STRONGLY PREFERRED

Any hands-on exposure to testing AI/LLM-powered features — prompt injection resistance,

output safety/grounding checks, or evaluating model responses for quality.

Security testing exposure — basic penetration testing concepts, understanding of common API/

auth vulnerabilities.

Experience with load/performance testing tools (k6, JMeter, or similar) against asynchronous,

queue-based systems.

Familiarity with OAuth 2.0 / OIDC-based auth flows (Entra ID, Okta, or similar).

Experience testing systems that integrate with enterprise systems of record (SAP, ServiceNow,

or similar).