Automation & Manual Test EngineerLocation: Hyderabad, India | Company: OneCounsel | Type: Full-time | Onsite/HybridAbout OneCounselOneCounsel is building an AI-native legal practice management platform for personal injury law firms in the United States. Think "TurboTax for PI Law" — combining AI-powered document extraction, intelligent case valuation, prescriptive workflows, and conversational AI agents to transform how attorneys manage cases from first contact through settlement.The OpportunityWe're looking for an Automation & Manual Test Engineer who takes quality personally. You will be the last line of defence between our engineers and PI attorneys who depend on OneCounsel to manage cases worth hundreds of thousands of dollars. On a HIPAA-regulated, SOC 2-audited platform, a missed bug is not just a regression — it is a compliance event, a malpractice risk, or a data breach.This is a rare chance to:Own the end-to-end quality bar — from reviewing tickets in sprint planning to signing off on production deploymentsBuild a test automation suite across the full stack: pytest (backend), Vitest + React Testing Library (frontend), Playwright (E2E), k6 (load)Drive coverage from the current 49%/69% baseline to the 80/70/80 CI-enforced thresholdsCatch authorization bypasses, PHI leaks, multi-tenant data exposure, and financial miscalculations before they reach attorneysWork shoulder-to-shoulder with a small, senior engineering team that treats tests as a first-class deliverableShape the testing strategy for AI agent outputs, streaming UIs, and event-driven pipelines — territory most QA playbooks have never visitedWhat You'll DoManual & Exploratory TestingExecute structured test cases and exploratory sessions across case management, intake wizard, evidence upload, party management, financial/lien ledger, and template letter generationTest role-based access control across four personas (Attorney, Case Manager, Paralegal, Ops Manager) — verify every UI action respects Cedar/AVP authorizationValidate PHI handling: confirm sensitive fields are masked in event payloads, PDFs, and API responses in line with HIPAA requirementsPerform regression testing on every sprint release and maintain a living regression checklist tied to CI gatesTest responsive behaviour across desktop and tablet breakpoints in the Nordic design system (Next.Js 15 / shadcn/ui / Tailwind v4)File detailed, reproducible bug reports in Jira with environment context, reproduction steps, expected vs. actual, and severity classificationTest Automation — FrontendWrite and maintain Vitest + React Testing Library unit tests for hooks, utility functions, Zod schemas, and UI components targeting 80% statement/function coverageUse Mock Service Worker (MSW) to mock API responses in component tests — keep tests deterministic and fast without hitting the networkWrite Playwright E2E tests for critical user flows: intake wizard (8 steps), case creation, party CRUD, document upload, and case phase transitionsAssert that loading skeletons, error boundaries, empty states, and toast notifications fire correctly under simulated latency and error conditionsVerify multi-step form validation (Zod schemas), optimistic updates with rollback,



and Zustand store persistence across page reloadsTest Automation — BackendWrite pytest unit tests for FastAPI routers and service classes covering success paths, validation errors, 4xx/5xx responses, and @require_permission decorator enforcementWrite integration tests that hit the real Aurora PostgreSQL database (via SSM tunnel) to verify Row-Level Security policies, enum constraints, cascading deletes, and cross-tenant data isolationTest EventBridge event publishing: verify CaseCreated and PhaseChanged events carry the correct payload shape with PHI fields maskedAssert response envelope format ({"data": ..., "meta": {...}}) and cursor pagination behaviour across all list endpointsRun mutation testing (mutmut) on intake scoring and gate logic to verify tests actually catch injected bugs, not just execute linesPerformance & Load TestingDesign and run k6 load test scenarios for case list, intake submission, and document upload endpointsEstablish p95/p99 latency baselines and flag regressions in CI before they reach productionIdentify database N+1 patterns, slow queries, and Redis cache miss rates from CloudWatch metrics during load runsCI/CD & Quality GatesOwn the CI coverage gate: enforce 80/70/80 thresholds in GitHub Actions for the web build and 75%+ for the API buildPublish per-PR coverage delta comments (e.G. "This PR changes coverage: 69% → 71% (+2%)") with file-level breakdowns for changed filesMaintain the .Coverage-baseline.Json ratchet mechanism — no PR may decrease a file's coverage below its committed baselineParticipate in sprint planning and story reviews to catch untestable designs early; add acceptance criteriato Jira stories before development beginsTriage flaky tests, own the test suite health dashboard, and keep CI green as the default stateWho You AreRequired Skills2–5 years of software testing experience, including both manual testing and test automationHands-on experience writing automated tests in Python (pytest) and/or JavaScript/TypeScript (Jest, Vitest, or equivalent)Experience with Playwright, Cypress, or Selenium for end-to-end browser testingSolid understanding of REST API testing — comfortable using Postman, curl, or code-based clients to validate response shapes, status codes, and error formatsFamiliarity with SQL — able to write queries to verify database state, check constraint violations, and trace data through service layersExperience with version control (Git) and CI/CD pipelines — able to read a failing GitHub Actions job and trace it to the root causeStrong analytical mindset — able to decompose a feature into a test matrix, identify boundary conditions, and reason precisely about what "correct" meansClear written communication — bug reports that a developer can reproduce without a meetingAbility to work independently and navigate a Turborepo monorepo with multiple services and applicationsPreferred SkillsExperience testing HIPAA-regulated, SOC 2,



or other compliance-heavy SaaS products — understanding of PHI, audit logging, and data residency requirementsFamiliarity with React Testing Library and Mock Service Worker (MSW) for component-level testing in React/Next.Js applicationsExperience with performance and load testing tools (k6, Locust, JMeter, or equivalent)Exposure to role-based or attribute-based access control systems — ability to design test matrices that probe RBAC/ABAC permission boundariesFamiliarity with mutation testing tools (mutmut for Python, Stryker for TypeScript) to measure test effectiveness beyond coverage percentagesBasic AWS knowledge — able to read CloudWatch logs, trace a request through ALB access logs, and understand ECS task failuresExposure to event-driven architectures — understanding how to verify that the right events are published with the right payloadsExperience testing AI-generated outputs or LLM-based features — able to design assertions for non-deterministic, streaming, or structured AI responsesFamiliarity with legal-tech, health-tech, or financial SaaS domain requirementsSoft Skills & MindsetRisk-driven — you prioritise tests by consequence (a PHI leak outweighs a label truncation), not by coverage deltaAdversarial — you think like a curious attacker when probing authorization and data isolation boundariesDetail-oriented — you notice the off-by-one in a statute-of-limitations countdown and the missing toast on a failed mutationPreventive — you catch ambiguous requirements in sprint planning, not in the regression cycleCollaborative — developers want you in their corner, not across the table; you make quality a shared value, not a gateSystematic — you maintain test plans and coverage baselines as living documents, not one-off artefactsOur Stack — Quick ReferenceFrontend: Next.Js 15 (App Router), TypeScript, Tailwind v4, shadcn/ui, TanStack Query, Zustand, Framer MotionBackend: FastAPI (Python 3.12+), SQLAlchemy 2.0 async, Alembic, Pydantic v2Auth & Authorization: Amazon Cognito, JWT middleware, Cedar/Amazon Verified Permissions (ABAC)Database: Aurora PostgreSQL 16 (Serverless v2, RLS), Redis 7.1 (ElastiCache)AI & Agents: Anthropic Claude, LangGraph, LangChain, Amazon Bedrock, Neptune Analytics, OpenSearchAWS: ECS Fargate, ALB, EventBridge, SQS, Step Functions, Textract, SES, S3, CloudFront, CloudWatchTesting: pytest, Vitest, React Testing Library, Playwright, k6, mutmut, Stryker, MSWInfra: Terraform, GitHub Actions, Turborepo, pnpm workspaces, DockerWhy Join OneCounsel?High-impact founding-team role — your sign-off is the last gate before attorneys across the US see a new featureOwn quality end-to-end — you set the bar, not just tick boxes; build the automation suite from scratch on a greenfield codebaseNovel testing territory — AI agent outputs, streaming UIs, event-driven pipelines, and compliance-heavy data flows that most QA playbooks have not mappedModern, well-architected codebase — opinionated design system, solid typing, CI gates, and clean conventionsHybrid/flexible work from Hyderabad with async collaboration with the US-based founderEquity participation in a fast-growing legal-tech companyContinuous learning — cutting-edge LLMs, agent frameworks, and AWS-native architectures

📌 Quality Assurance Automation Engineer (Hyderabad)
🏢 One Counsel
📍 Hyderabad