Senior QA & Security Analyst

We are looking for an experienced Senior QA & Security Analyst with a strong background in software quality assurance, test automation, API testing, performance testing, and application security testing. The ideal candidate will be able to own end-to-end quality activities while identifying security vulnerabilities and ensuring applications meet functional, performance, and security requirements.
Key Responsibilities
Define and execute comprehensive test strategies, test plans, test cases, and quality processes.
Perform functional, integration, regression, smoke, sanity, exploratory, end-to-end, and UAT testing.
Design, develop, and maintain automated testing frameworks for web and/or mobile applications.
Perform API testing and validation for RESTful APIs and microservices.
Conduct application security testing, vulnerability assessments, and penetration/security testing.
Identify security weaknesses, authentication/authorization issues, and application vulnerabilities and work with development teams on remediation.
Perform performance, load, and stress testing and analyze system behavior under different workloads.
Integrate automated tests and quality/security checks into CI/CD pipelines.
Perform root-cause analysis for defects and production issues and support defect prevention initiatives.
Review requirements, user stories, and acceptance criteria to identify functional, quality, and security risks early in the SDLC.
Collaborate closely with developers, product teams, DevOps engineers, and other stakeholders throughout the development lifecycle.
Maintain clear test documentation, defect reports, traceability, quality metrics, and release-readiness reports.
Support and mentor other QA engineers and promote shift-left, risk-based, and continuous testing practices.
Required Qualifications & Experience
6+ years of experience in Software QA / Quality Engineering, preferably at Senior QA Engineer or Senior Test Automation Engineer level.
Strong experience in both manual and automated testing.
Hands-on experience with automation tools such as Selenium, Cypress, Playwright and/or Appium.
Strong experience with API testing using tools such as Postman, RestAssured, Swagger/OpenAPI, or equivalent.
Hands-on experience with security testing, vulnerability assessment and/or penetration testing of web applications and APIs.
Experience with performance testing tools such as JMeter, k6, Gatling, or equivalent.
Good programming/scripting skills in at least one language such as Java, Python, JavaScript/TypeScript, or similar.
Experience integrating automated testing into CI/CD pipelines using Jenkins, GitHub Actions, Azure DevOps, CircleCI, or equivalent.
Strong knowledge of software testing methodologies, SDLC, defect management, risk-based testing, and Agile/Scrum environments.
Experience with test/defect management tools such as Jira, TestRail, Xray, Zephyr, or equivalent.
Good understanding of databases and ability to use SQL for data validation.
Bachelor's degree in Computer Science, Software Engineering, or a related technical discipline.
Strong English communication, analytical, and problem-solving skills.
Highly Desirable
Experience testing fintech, banking, payment, SaaS, or other security-sensitive applications.
Experience with mobile application testing on iOS and Android.
Knowledge of BDD/TDD and tools such as Cucumber/Gherkin.
Experience with Docker, Kubernetes, AWS, or other cloud/DevOps environments.
Experience identifying and responsibly reporting real-world security vulnerabilities.
Relevant QA or security certifications.

Work arrangement
Yes