Automation & Manual Test Engineer Location: One Counsel | Type: Full-time | Onsite/Hybrid

One Counsel is building an AI-native legal practice management platform for personal injury law firms in the United States. Think 'Turbo Tax for PI Law' — combining AI-powered document extraction, intelligent case valuation, prescriptive workflows, and conversational AI agents to transform how attorneys manage cases from first contact through settlement.

We're looking for an Automation & Manual Test Engineer who takes quality personally. On a HIPAA-regulated, SOC 2-audited platform, a missed bug is not just a regression — it is a compliance event, a malpractice risk, or a data breach.

Own the end-to-end quality bar — from reviewing tickets in sprint planning to signing off on production deployments

Build a test automation suite across the full stack: pytest (backend), Vitest + React Testing Library (frontend), Playwright (E2E), k6 (load)

Catch authorization bypasses, PHI leaks, multi-tenant data exposure, and financial miscalculations before they reach attorneys

Shape the testing strategy for AI agent outputs, streaming UIs, and event-driven pipelines — territory most QA playbooks have never visited

Manual & Exploratory Testing

Execute structured test cases and exploratory sessions across case management, intake wizard, evidence upload, party management, financial/lien ledger, and template letter generation

Validate PHI handling: confirm sensitive fields are masked in event payloads, PDFs, and API responses in line with HIPAA requirements

Perform regression testing on every sprint release and maintain a living regression checklist tied to CI gates

Test responsive behaviour across desktop and tablet breakpoints in the Nordic design system (Next.js 15 / shadcn/ui / Tailwind v4)

Test Automation — Frontend

Write and maintain Vitest + React Testing Library unit tests for hooks, utility functions, Zod schemas, and UI components targeting 80% statement/function coverage
Use Mock Service Worker (MSW) to mock API responses in component tests — keep tests deterministic and fast without hitting the network

Assert that loading skeletons, error boundaries, empty states, and toast notifications fire correctly under simulated latency and error conditions

Test Automation — Backend





Write pytest unit tests for FastAPI routers and service classes covering success paths, validation errors, 4xx/5xx responses, and @require_permission decorator enforcement

Write integration tests that hit the real Aurora PostgreSQL database (via SSM tunnel) to verify Row-Level Security policies, enum constraints, cascading deletes, and cross-tenant data isolation

Test Event Bridge event publishing: verify Case Created and Phase Changed events carry the correct payload shape with PHI fields masked

Assert response envelope format ('data': ..., 'Run mutation testing (mutmut) on intake scoring and gate logic to verify tests actually catch injected bugs, not just execute lines
Performance & Load Testing
Identify database N+1 patterns, slow queries, and Redis cache miss rates from Cloud Watch metrics during load runs
CI/CD & Quality Gates

Own the CI coverage gate: enforce 80/70/80 thresholds in Git Hub Actions for the web build and 75%+ for the API build

Participate in sprint planning and story reviews to catch untestable designs early; 2–5 years of software testing experience, including both manual testing and test automation

~ Hands-on experience writing automated tests in Python (pytest) and/or Java Script/Type Script (Jest, Vitest, or equivalent)

~ Experience with Playwright, Cypress, or Selenium for end-to-end browser testing

~ Solid understanding of REST API testing — comfortable using Postman, curl, or code-based clients to validate response shapes, status codes, and error formats
~ Familiarity with SQL — able to write queries to verify database state, check constraint violations, and trace data through service layers
~ Experience with version control (Git) and CI/CD pipelines — able to read a failing Git Hub Actions job and trace it to the root cause
~ Experience testing HIPAA-regulated, SOC 2, or other compliance-heavy SaaS products — understanding of PHI, audit logging, and data residency requirements

Familiarity with React Testing Library and Mock Service Worker (MSW)



for component-level testing in React/Next.js applications

Experience with performance and load testing tools (k6, Locust, JMeter, or equivalent)

Familiarity with mutation testing tools (mutmut for Python, Stryker for Type Script) to measure test effectiveness beyond coverage percentages
Basic AWS knowledge — able to read Cloud Watch logs, trace a request through ALB access logs, and understand ECS task failures
Experience testing AI-generated outputs or LLM-based features — able to design assertions for non-deterministic, streaming, or structured AI responses
Familiarity with legal-tech, health-tech, or financial SaaS domain requirements
Risk-driven — you prioritise tests by consequence (a PHI leak outweighs a label truncation), not by coverage delta
Adversarial — you think like a curious attacker when probing authorization and data isolation boundaries
Preventive — you catch ambiguous requirements in sprint planning, not in the regression cycle
you make quality a shared value, not a gate
Frontend: Next.js 15 (App Router), Type Script, Tailwind v4, shadcn/ui, Tan Stack Query, Zustand, Framer Motion
Backend: FastAPI (Python 3.12+), SQLAlchemy 2.0 async, Alembic, Pydantic v2
Amazon Cognito, JWT middleware, Cedar/Amazon Verified Permissions (ABAC)
Database: Aurora PostgreSQL 16 (Serverless v2, RLS), Redis 7.1 (Elasti Cache)
AI & Agents: AWS: ECS Fargate, ALB, Event Bridge, SQS, Step Functions, Textract, SES, S3, Cloud Front, Cloud Watch

Testing: pytest, Vitest, React Testing Library, Playwright, k6, mutmut, Stryker, MSW

Terraform, Git Hub Actions, Turborepo, pnpm workspaces, Docker

Own quality end-to-end — you set the bar, not just tick boxes; build the automation suite from scratch on a greenfield codebase
Novel testing territory — AI agent outputs, streaming UIs, event-driven pipelines, and compliance-heavy data flows that most QA playbooks have not mapped
Up-to-date, well-architected codebase — opinionated design system, strong typing, CI gates, and clean conventions
Hybrid/flexible work from Hyderabad with async collaboration with the US-based founder
Equity participation in a fast-growing legal-tech company

Continuous learning — cutting-edge LLMs, agent frameworks, and AWS-native architectures

📌 Quality Assurance (QA) Automation Engineer (Hyderabad)
🏢 One Counsel
📍 Hyderabad