Senior QA Engineer- Enterprise Digital PlatformNew

Join our Kuala Lumpur team as a Senior QA Engineer working on digital projects for clients across financial services, healthcare, technology, and other industries. You'll test modern platforms built with current technologies – Strapi, Sanity and Contentful for content management, GraphQL APIs, and React frontends, iOS and Android apps, and the integrations that tie everything together.

This isn't about being brought in at the end to tick boxes. You'll work alongside developers, architects, and designers from the start, helping shape quality into projects rather than just finding issues late. You'll build test automation using tools like Playwright and Cypress, validate API contracts, ensure accessibility compliance, and test multilingual implementations across English, Traditional Chinese, Simplified Chinese, and others.

As a senior engineer, you'll work with junior QA staff, establish testing approaches for new projects, and help improve how we work. We're leveraging AI tools to speed up test creation and execution, so being comfortable with those workflows matters. You'll collaborate with teams across our global offices and get exposure to different project types, technologies, and client challenges.

Key Responsibilities:

• Design and execute comprehensive test strategies for enterprise web platforms built on modern headless CMS architectures (Strapi, Contentful, Drupal)
• Build and maintain test automation frameworks using Playwright, Cypress, and Jest for frontend testing, and Postman/REST Assured for API validationPerform GraphQL API testing across federated schemas, validating query performance, data integrity, and error handling
• Validate multilingual content rendering and functionality across English, Traditional Chinese, and Simplified Chinese, including character encoding, locale formatting, and cultural appropriateness
• Conduct security testing including SAST/DAST validation, vulnerability scanning integration, and compliance verification with tools like Fortify, SonarQube, and Blackduck
• Execute cross-browser compatibility testing across Chrome, Safari, Edge, and Firefox with automated visual regression detection
• Conduct performance and load testing using tools like LoadRunner, JMeter, or similar to validate response times, throughput, and system behavior under load
• Perform accessibility testing to WCAG 2.2 standards using axe-core and manual screen reader validation
• Test AI-powered features including translation quality validation, content generation accuracy, and LLM integration reliability
• Establish CI/CD quality gates within Jenkins pipelines, providing automated test execution and intelligent test selection based on code changes
• Validate database operations using PostgreSQL, writing SQL queries for data integrity verification and performance testing
• Test CDN configurations, caching strategies, and content delivery pipelines for optimal global performance
• Collaborate with DevSecOps teams to integrate security scanning and compliance validation into automated pipelines
• Mentor junior QA engineers and contribute to establishing quality standards across projects

*What we are looking for*

Must-Have:

• 5+ years of QA engineering experience with at least 3 years in enterprise web application testing, preferably in digital transformation or platform modernization programs
• Strong hands-on experience with test automation frameworks including Playwright or Cypress for frontend testing, and proven ability to build maintainable automation at scale
• Proficiency in API testing for both REST and GraphQL endpoints, with experience using Postman, REST Assured, or similar tools to validate complex integration scenarios
• Experience testing headless CMS platforms and understanding of content modeling, API-driven content delivery, and JAMstack architectures
• Database testing capabilities including writing SQL queries for PostgreSQL or similar relational databases to validate data integrity and performance
• Multilingual testing expertise including validation of UTF-8 character encoding, double-byte character sets (Big5, GB2312), and internationalization (i18n) implementations
• Security testing knowledge including integration with SAST/DAST tools, understanding of OWASP Top 10 vulnerabilities, and ability to validate security controls CI/CD integration experience, particularly with Jenkins, including automated test execution, reporting, and quality gate implementation
• Strong analytical and debugging skills with ability to identify root causes, reproduce complex issues, and provide actionable remediation guidance

Nice-to-Have:

• Experience with Strapi CMS testing including content types, API endpoints, authentication, and plugin functionality
• Knowledge of testing patterns including server-side rendering validation, client-side hydration, and component testing
• Experience testing AI-powered features such as translation systems (e.g., Lilt), content generation, or LLM integrations
• Familiarity with OpenSearch or Elasticsearch testing for multilingual search functionality and relevance tuning
• Advanced performance testing expertise including response time analysis, bottleneck identification, and performance optimization recommendations
• Container and Kubernetes testing experience, including validation of containerized applications and microservices deployments
• Knowledge of cloud platforms (AWS, Azure, Huawei Cloud) and cloud-native testing approaches
• Experience with financial services or heavily regulated industry testing requirements
• Contributions to open-source testing tools or frameworks

*Who you are*

Quality-obsessed technologist: You view quality as a continuous process embedded throughout the development lifecycle, not a final checkpoint. You understand modern web architectures deeply enough to identify where quality risks exist and design targeted testing strategies that provide maximum confidence with optimal efficiency.

Automation architect: You don't just write test scripts—you build scalable frameworks that others can extend. You leverage AI coding assistants to accelerate test development, understand when to automate versus manually test, and create maintainable automation that evolves with the platform.

Security-minded tester: You think like an attacker, understanding common vulnerabilities and how to test for them. You integrate security testing into your everyday work, validating authentication, authorization, input sanitization, and data protection as naturally as checking functional requirements.

Collaborative problem solver: When issues arise, you work with developers to understand root causes and suggest practical solutions. You communicate technical issues clearly to both technical and non-technical stakeholders, helping teams make informed decisions about quality trade-offs and risk acceptance.

Multilingual platform specialist: You understand the complexities of testing across languages and cultures—from character encoding edge cases to locale-specific formatting to cultural appropriateness of content. You ensure international users receive the same quality experience regardless of their language.

Pragmatic quality advocate: You balance thoroughness with delivery velocity, knowing when comprehensive testing is critical versus when lightweight validation suffices. You help teams establish appropriate quality bars for different project contexts and risk profiles.

Continuous learner: You stay current with emerging testing technologies, AI-powered testing tools, and modern quality practices. You experiment with new approaches, share learnings with the team, and actively contribute to improving Appnovation's QA capabilities.

What Appnovation Offers

• Challenging and rewarding work with real impact
• Direct Access to Cutting-Edge AI Platforms
• Diverse and Inclusive Culture
• Growth opportunities for personal and professional development
• A collaborative and innovative work environment where your ideas are valued
• Exposure to exciting projects and high-profile clients
• Supportive work environment with access to company leaders
• Hybrid working model