Testing & QA Engineer SDK & Security Validation

Department: R&D;

Location: Hyderabad

Role Overview

NPCI is seeking a detail-oriented and technically strong Testing & QA Engineer to join its Research & Development team. This role will focus on quality assurance, validation, and reliability testing of Android/mobile SDKs, with a strong emphasis on security-related developments, compliance, and robustness in payment-grade environments.

The ideal candidate will be responsible for defining and executing comprehensive QA strategies for SDKs, APIs, mobile components, and security-sensitive product features. The role requires experience in functional testing, automation testing, SDK validation, API testing, performance testing, and security-focused quality engineering. The candidate should be comfortable working closely with developers, architects, product teams, and security stakeholders to ensure high-quality and secure deliverables.

This role is especially relevant for candidates who understand the challenges of validating payment, authentication, cryptographic, and trust-sensitive mobile components in a structured R&D; environment.

Key Responsibilities

1. SDK Testing and Quality Assurance

- Design, develop, and execute test strategies for Android/mobile SDKs and related software components.
- Validate SDK functionality across multiple Android versions,device types, OEM environments, and integration scenarios.
- Create detailed test plans, test cases, test scenarios, and traceability matrices for SDK features and enhancements.
- Perform integration testing to verify SDK behavior when embedded into host applications.
- Ensure backward compatibility and stability of SDK releases across supported environments.
- Validate SDK installation, configuration, initialization, runtime behavior, error handling, and upgrade paths.

2. Security Validation and Secure QA Support

- Perform validation of security-sensitive features, including authentication flows, secure storage, device binding, cryptographic operations, token handling, and session management.
- Verify implementation of mobile security controls such as certificate pinning, root/jailbreak detection, tamper detection, obfuscation, and secure communication.
- Support review and validation of security requirements in SDK and mobile application workflows.
- Work closely with engineering and security teams to identify vulnerabilities, weak controls, insecure configurations, and risk areas early in the development lifecycle.
- Participate in security testing activities, including negative testing, abuse-case testing, and misconfiguration validation.
- Assist in validating compliance with secure coding and mobile security best practices.

3. Test Automation

- Build and maintain automated test frameworks for SDK and application validation.
- Develop automated functional, regression, integration, and API test suites.
- Automate repeatable test scenarios for SDK releases and continuous validation pipelines.




- Integrate automated test execution with CI/CD pipelines to improve release quality and reduce manual effort.
- Contribute to test infrastructure for emulator, real-device, and device farm-based testing.

4. API, Integration, and Platform Validation

- Validate SDK interaction with backend APIs, device services, and platform capabilities.
- Perform testing for network handling, retries, resilience, transaction integrity, and failure scenarios.
- Verify interoperability between SDK components and dependent systems.
- Support testing of mobile components involving NFC, device security modules, cryptographic interfaces, and secure communication layers where applicable.
- Ensure consistency of behavior across sandbox, UAT, and production-like test environments.

1. Performance, Reliability, and Resilience Testing

- Conduct performance, stress, load, and stability testing for SDKs and related mobile components.
- Validate app/SDK behavior under low memory, poor network, device interruptions, and edge-case conditions.
- Test for battery impact, startup latency, SDK footprint, crash resilience, and transaction reliability.
- Assess release readiness from a non-functional quality standpoint.

6. Defect Management and Quality Governance

- Identify, document, reproduce, prioritize, and track defects with clear technical detail.
- Work with developers to troubleshoot issues, validate fixes, and prevent regression.
- Maintain structured QA documentation including release reports, quality dashboards, and defect metrics.
- Support root cause analysis and continuous improvement initiatives for recurring quality issues.
- Contribute to definition and monitoring of QA gates and release acceptance criteria.

7. Collaboration and Process Improvement

- Work closely with R&D; developers, product managers, architects, security teams, and external stakeholders.
- Participate in requirement reviews, design discussions, sprint planning, and release readiness reviews.
- Recommend improvements in QA processes, tooling, test coverage, and product quality standards.
- Contribute to a quality-first engineering culture within the R&D; organization.

Required Qualifications
- Bachelors degree in Computer Science, Information Technology, Electronics, or a related discipline.
- 5-8 years of relevant experience in software testing, QA engineering, or mobile/SDK validation.
- Hands-on experience in testing Android applications, mobile SDKs, APIs, or platform components.
- Strong understanding of software testing lifecycle, defect management, and quality processes.
- Experience in creating detailed manual and automated test artifacts.




- Familiarity with security-focused validation for mobile or payment-related products.

Required Technical Skills
- Strong knowledge of functional, regression, integration, system, and user acceptance testing concepts.
- Experience in Android/mobile testing across multiple OS versions and device profiles.
- Knowledge of API testing tools such as Postman, Swagger, or equivalent.
- Experience with test automation frameworks and scripting for mobile/application testing.
- Understanding of CI/CD pipelines and automated quality checks.
- Familiarity with defect tracking and test management tools such as JIRA, TestRail, Zephyr, or similar platforms.
- Robust debugging, log analysis, and issue reproduction skills.
- Understanding of secure communication, authentication models, and mobile security testing fundamentals.
- Working knowledge of cryptographic concepts, secure key handling, token validation, and transaction security is desirable.
- Exposure to performance and reliability testing tools is preferred.

Preferred Skills and Experience
- Experience testing SDKs intended for third-party developer integration.
- Exposure to payment systems, fintech products, authentication products, or regulated digital platforms.
- Familiarity with Android security architecture, keystore usage, app signing, and secure storage validation.
- Experience with security testing tools, static/agile analysis outputs, or vulnerability validation workflows.
- Understanding of NFC, host card emulation, secure elements, device attestation, or trusted execution concepts is an advantage.
- Experience in testing products that require high assurance, auditability, and compliance alignment.
- Exposure to Agile / Scrum development environments.

Key Competencies
- Strong analytical and problem-solving ability
- High attention to detail and structured thinking
- Ability to identify edge cases and risk areas proactively
- Clear documentation and reporting skills
- Strong collaboration and cross-functional communication
- Ownership mindset and commitment to product quality
- Ability to work in an R&D; environment with evolving requirements and rapid experimentation

Role Expectations The selected candidate will be expected to:
- Ensure that SDK and security-focused deliverables meet high standards of quality, reliability, and trustworthiness
- Strengthen validation practices for mobile and security-critical components
- Improve release confidence through structured testing and automation
- Support the R&D; team in delivering secure, scalable, and production-ready innovations

Why Join This Role This position offers an opportunity to work on next-generation digital payment and security technologies within NPCIs R&D; ecosystem. The role provides meaningful exposure to mobile innovation, SDK quality engineering, secure platform validation, and payment-grade software assurance, with direct impact on products of national importance.

📌 Testing & QA Engineer (Hyderabad)
🏢 National Payments Corporation Of India (NPCI)
📍 Hyderabad