Senior QA Automation Engineer

Job Description:

ABOUT THE ROLE:
We are looking for a Senior QA Automation Engineer to own quality across an integration-heavy platform, covering automation, API, asynchronous testing, performance, security, manual testing, and CI/CD quality.

KEY RESPONSIBILITIES:
. Define and maintain test strategy across unit, contract, API, E2E, performance, security, and manual testing.
. Build and maintain Playwright automation using TypeScript/JavaScript, Java, or Python, including fixtures, authentication, parallel execution, trace viewer, and Allure.
. Perform API testing across REST, gRPC, and GraphQL using Postman/Newman, REST Assured, or Playwright APIRequest, including schema, authentication, negative scenarios, and contract testing.
. Test asynchronous flows using RabbitMQ, SQS, and webhooks, covering eventual consistency, ordering, idempotency, retries, and DLQs.
. Execute JMeter load, stress, soak, and spike testing and analyse p95/p99 latency, throughput, and bottlenecks. Exposure to k6/Gatling is a plus.
. Perform Security/VAPT testing using Burp Suite, OWASP ZAP, Nmap, Nikto, and SQLMap, covering OWASP Top 10 and API Top 10.
. Implement AI-assisted testing using AI test generation, Playwright MCP, Copilot, self-healing locators, visual AI, and LLM testing.
. Drive exploratory, risk-based, and UAT testing using BVA, equivalence partitioning, decision tables, and state transitions.
. Work with WireMock, LocalStack, and Testcontainers for service virtualisation and test data.
. Implement CI/CD quality gates using Jenkins, Bitbucket, Pact, OpenAPI/AsyncAPI diff, and axe-core.
. Monitor flaky tests, defect lifecycle, quality metrics, and test coverage, while mentoring QA team members.

REQUIRED SKILLS:
. Expert hands-on experience with Playwright for UI/API automation.
. Strong API testing with Postman/Newman, REST Assured, or Playwright APIRequest.
. Hands-on RabbitMQ/SQS, webhooks, and event-driven testing.
. Expert JMeter experience including correlation, parameterisation, distributed testing, and result analysis.
. Hands-on Security/VAPT with Burp Suite, OWASP ZAP, Nmap, Nikto, and SQLMap.
. Hands-on AI-based testing and AI-assisted automation.
. Strong manual testing and test design knowledge.
. Hands-on TypeScript/JavaScript with Java or Python.
. Hands-on Jenkins, Bitbucket, and Allure.
. Strong SQL and data validation across databases, queues, and logs.

GOOD TO HAVE:
. Pact, Pact Broker, can-i-deploy, OpenAPI/AsyncAPI diffing.
. axe-core and WCAG 2.2 AA.
. AWS, SQS, S3, LocalStack, Kibana, and Zipkin.
. k6, Gatling, Toxiproxy, and chaos/resilience testing.
. ISTQB Advanced, CEH, eJPT, or OSCP.