Waqar Mehmood
About Candidate
Software Quality Assurance Engineer with 4+ years of experience testing mission-critical cybersecurity SaaS applications. Specialize in validating complex, multi-layered security products from REST API integrations to 130+ third-party security appliances and agents including Microsoft Defender for Endpoint and CrowdStrike EDR.
What I bring to a QA team: â—† End-to-end test strategy, test planning, case design, and requirement traceability across functional, regression, and edge-case scenarios â—† Security & proxy testing using MITM Proxy, OWASP ZAP, Burp Suite, Squid Proxy Server, and Wireshark â—† REST API validation with Postman (collections, environments, automated runners) and backend log analysis for rapid root-cause triage â—† Python-based test automation to streamline regression workflows and reduce manual effort â—† Release management. I’ve coordinated 5 product releases across multiple clusters, working directly with customers across the US, Europe, and the Middle East to ensure stable, on-time delivery â—† Data analytics testing on Tableau dashboards, plus monitoring via Elasticsearch, Kibana, and Grafana
I work in Agile/Scrum environments and am comfortable owning the full defect lifecycle in JIRA, from discovery through resolution. I’m currently expanding into Selenium with Python, Playwright, and AI-assisted QA workflows to keep pushing test efficiency further.
Open to connecting with fellow QA professionals, security engineers, and anyone building reliable, secure SaaS products
Education
Work & Experience
* Performed comprehensive testing of cybersecurity SaaS applications, ensuring alignment with business requirements and technical specifications.
* Manage test planning, effort estimation and test build execution.
* Performed functional, integration, regression and end-to-end testing across 130+ third-party security appliances, security agents and intelligence modules most popularly includes Microsoft products (Defender for Endpoint, Defender XDR, Sentinel, Office 365), CrowdStrike products (EDR, Identity Protection, Falcon Spotlight), Google Security appliance, SentinelOne EDR, Wazuh, McAfee and many more, that provides complete range of security solutions like Endpoint, Cloud Security, Identity Protection, Threat Intelligence and SIEM(Security Information and Event Management).
* Managed 5 product releases across multiple clusters, collaborating with global customers across the US, Europe, and Middle East regions to ensure quality delivery and stakeholder alignment.
* Designed and maintain detailed test plans, test cases, and test scenarios covering functional, negative, and edge-case conditions.
* Performed pre-release and post-release validation to ensure stable production deployments and minimize production defects.
* Performed testing on the analytics dashboards prepared with the data science and engineering platforms like Tableau.
* Conducted detailed backend log analysis and log triaging to identify root causes and accelerate defect resolution.
* Prepared detailed Release Notes and ensured smooth and timely release cycles.
* Utilized tools such as MITM Proxy, Squid Proxy Server, Wireshark, Oracle VM VirtualBox, VMware, Flameshot, Ubuntu terminal for port forwarding.
* Established comprehensive Test Plans and detailed Test Cases aligned directly with Business Requirement Documents (BRDs).
* Executed thorough REST API testing using Postman, validating endpoints, header configurations, status codes, and JSON response payloads.
* Collaborated actively in Agile/Scrum ceremonies, ensuring complete test coverage across SDLC, STLC, and Bug Life Cycle stages.
* Logged well-structured defect reports in JIRA with exact reproduction steps, enabling rapid engineering turnaround.
* Managed operational software quality across US Title Insurance and Mortgage platforms including Atclose, Data Trace Systems 2.0, Title Point, Data Tree, and Stewart Resware.
* Executed detailed system data validation to ensure seamless transactional processing.
* Processed and standardized operational data assets to ensure high data integrity across downstream enterprise applications.