Quality Assurance (QA) Engineer
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
OneAsset is seeking a self-directed QA engineer with 5+ years of experience in API/backend testing, auth systems, and data validation. The role involves owning quality end-to-end, designing test strategies, and probing for bugs beyond the happy path.
Key Skills for This Role
Responsibilities
- Call endpoints directly via Postman or curl; read and interrogate Swagger/OpenAPI specs
- Verify request/response contracts, input validation, and error handling across edge cases the UI never exposes
- Design negative path and boundary tests that go beyond surface level smoke testing
- Probe Privy authentication flows end to end for correctness and resilience
- Test for broken object level authorisation (BOLA/IDOR) — ensure no user can read or modify another user's data
- Identify permission gaps across roles, tenants, and session states
- Confirm that what the UI presents matches the backend and database — asset values, financial figures, enum integrity, category states
- Verify data consistency across state transitions, including post migration correctness
- Design and run database level validation checks alongside API and UI testing
- Define what gets tested, how, and to what depth — no hand holding required
- Maintain a living test plan that evolves with the product
- Write clear, reproducible bug reports that engineers can act on immediately
Requirements
- 5+ years in QA engineering, with meaningful experience in API/backend testing
- Fluency with Postman, curl, and reading OpenAPI/Swagger documentation
- Demonstrable experience testing auth systems and access control logic
- Strong understanding of REST principles, HTTP semantics, and JSON
- Experience with data validation — querying databases (SQL) to verify backend state
- Autonomous, investigative mindset — you define scope, not wait for a script
Full Job Posting
Role Overview
- OneAsset is a regulated, venture backed platform at the intersection of tokenised real estate and institutional grade DeFi infrastructure.
- We are seeking a self directed QA engineer — not someone who clicks through the app confirming the happy path.
- You will own quality end to end: deciding what to probe, designing your own test strategy, and investigating independently.
What You Will Do
- API & Backend Testing: Call endpoints directly via Postman or curl; read and interrogate Swagger/OpenAPI specs.
- Verify request/response contracts, input validation, and error handling across edge cases the UI never exposes.
- Design negative path and boundary tests that go beyond surface level smoke testing.
- Auth & Access Control: Probe Privy authentication flows end to end for correctness and resilience.
- Test for broken object level authorisation (BOLA/IDOR) — ensure no user can read or modify another user's data.
- Identify permission gaps across roles, tenants, and session states.
- Data Correctness & Integrity: Confirm that what the UI presents matches the backend and database.
- Verify data consistency across state transitions, including post migration correctness.
- Design and run database level validation checks alongside API and UI testing.
- Test Strategy & Ownership: Define what gets tested, how, and to what depth — no hand holding required.
- Maintain a living test plan that evolves with the product.
- Write clear, reproducible bug reports that engineers can act on immediately.
Must Have
- 5+ years in QA engineering, with meaningful experience in API/backend testing.
- Fluency with Postman, curl, and reading OpenAPI/Swagger documentation.
- Demonstrable experience testing auth systems and access control logic.
- Strong understanding of REST principles, HTTP semantics, and JSON.
- Experience with data validation — querying databases (SQL) to verify backend state.
- Autonomous, investigative mindset — you define scope, not wait for a script.
Strong Plus
- Experience in fintech, Web3, DeFi, or tokenised asset platforms.
- Familiarity with Privy or similar wallet based / embedded wallet auth systems.
- Exposure to blockchain state verification — on chain vs. off chain data consistency.
- Experience writing test automation (JavaScript/TypeScript, Python, or similar).
- Prior work in a regulated environment (FCA, DFSA, VARA, or equivalent).
What Success Looks Like
- In your first 90 days, you will have: Conducted a full audit of our API surface and produced a prioritised risk register.
- Caught at least one high severity auth or data integrity bug before it reached production.
- Established a test strategy document the whole engineering team references.
- Become the person who asks the question nobody else thought to ask.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at OneAsset
PR & Communications Manager
Dubai, UAE
OneAsset is looking for a PR & Communications Manager to own the company's public narrative across media, speaking opportunities, and external communications in the RWA and tokenized real estate space. The role involves
Valuation & CRE Property Manager (Part-Time)
Dubai, UAE
OneAsset seeks a Valuation & CRE Property Manager to lead property valuation for acquisitions and bring commercial real estate management expertise. The role supports the Acquisitions and Product teams, starting part-tim
Legal Support – Real Estate & Finance Law (Part-Time)
Dubai, UAE
OneAsset seeks a part-time legal support professional to assist with real estate and financing legal documentation, due diligence, and regulatory liaison. Requires 3+ years of UAE legal support experience with a focus on
Valuation & CRE Property Manager (Part-Time)
Dubai, UAE
OneAsset seeks a Valuation & CRE Property Manager to lead property valuation for acquisitions and bring commercial real estate property management expertise. The role supports the Acquisitions and Product teams, starting
Legal Support – Real Estate & Finance Law (Part-Time)
Dubai, UAE
OneAsset is seeking a part-time legal support professional to assist with real estate and financing-related legal documentation in Dubai. The role involves preparing and reviewing legal documents, conducting due diligenc
PR & Communications Manager
Dubai, UAE
OneAsset, a startup in the RWA space, is hiring a PR & Communications Manager to own the company's public narrative across media, speaking opportunities, and external communications. The role requires 2-4+ years of PR or
PR & Communications Manager
Dubai, UAE
OneAsset is seeking a PR & Communications Manager to own the company's public narrative across media, speaking opportunities, and external communications in the RWA and tokenized real estate space. The role involves draf
Quality Assurance (QA) Engineer
Dubai, UAE
OneAsset is seeking a self-directed QA Engineer to own quality end-to-end, focusing on API and backend testing, auth and access control, and data correctness. The ideal candidate has 5+ years of QA experience, fluency wi
PR & Communications Manager
Dubai, UAE
Valuation & CRE Property Manager (Part-Time)
Dubai, UAE
Legal Support – Real Estate & Finance Law (Part-Time)
Dubai, UAE
Valuation & CRE Property Manager (Part-Time)
Dubai, UAE
Legal Support – Real Estate & Finance Law (Part-Time)
Dubai, UAE
PR & Communications Manager
Dubai, UAE
PR & Communications Manager
Dubai, UAE
Quality Assurance (QA) Engineer
Dubai, UAE