Kumail M.
QA Engineer | Manual & Automation | SaaS, Web, Mobile & API Testing
QA Engineer | Cybersecurity Specialist | Manual QA Tester | Test Automation Engineer | Playwright Expert | Web Application Security | API Testing Specialist | VAPT | Penetration Testing | Mobile App Tester | Regression Testing | Payment Gateway Testing | FinTech QA | SaaS QA | Postman Expert | TypeScript Automation | Security Testing I’m a QA Engineer and Cybersecurity expert with 100% Job Success Score and 15+ years of experience across SaaS and CRM platforms, mobile applications, POS systems, fintech, healthcare, and e-commerce. I help web, mobile, and API teams find bugs, vulnerabilities, and usability issues before their users or attackers do. My approach combines Quality Assurance with security-focused testing. I validate products against requirements, test them through real-user scenarios, and identify functional defects, security weaknesses, payment issues, API problems, and UX friction before they reach production. On a recent mobile project, I identified 100+ bugs before release, helping the application launch with zero critical issues. What I Work On: ✅ Manual QA & Functional Testing I thoroughly test applications across critical user journeys, business requirements, edge cases, and real-world scenarios. * Manual QA Testing * Functional Testing * Regression Testing * Exploratory Testing * End-to-End Testing * Smoke & Sanity Testing * User Acceptance Testing * Test Case Design * Cross-Browser Testing * Responsive Testing ✅ Playwright Test Automation I build maintainable automation suites that reduce repetitive manual regression work and help teams release faster. * Playwright + TypeScript * JavaScript Test Automation * End-to-End Automation * Cucumber / BDD * Automated Regression Suites * Cross-Browser Automation * GitHub Actions CI/CD Integration * Reusable Test Frameworks ✅ Cybersecurity & Application Security Modern products need more than functional testing. I help identify security weaknesses and reduce risk across web applications, APIs, networks, and infrastructure. * Web Application Security Testing * OWASP Top 10 Assessment & Mitigation * API Security Testing * Authentication & Authorization Testing * Vulnerability Assessment * Penetration Testing * Vulnerability Assessment & Penetration Testing (VAPT) * Security Audits & Risk Analysis * Access Control Testing * Security Configuration Review ✅ Network & Infrastructure Security I help assess infrastructure security and identify weaknesses that could increase exposure to cyber threats. * Network Security Assessment * Firewall Security Review * IDS/IPS Review * Network Segmentation * Secure Configuration Review * Endpoint Security * Access Control * Security Hardening * Infrastructure Risk Assessment ✅ Threat Monitoring & Security Operations Security requires continuous visibility, not just one-time testing. * Log Monitoring * Threat Detection * Security Event Analysis * Incident Response Support * Risk Identification * Security Policy Development * Security Best Practices Implementation * Preventive Security Recommendations ✅ API & Database Testing I validate APIs, integrations, databases, and backend workflows from both functional and security perspectives. * Postman API Testing * REST API Validation * Endpoint & Response Testing * API Integration Testing * Error Handling Validation * Webhook Testing * SQL Data Verification * MySQL & PostgreSQL * API Security Validation ✅ Mobile App Testing * iOS Testing via TestFlight * Android App Testing * Play Store Closed Testing * Real Device Testing * Android Emulator Testing * Mobile Web Testing * Cross-Device Testing * Responsive UI Validation ✅ SaaS, Website & E-Commerce QA * Registration & Login * User Onboarding * Checkout & Shopping Cart * SaaS Dashboards * Admin Panels * Role & Permission Testing * Subscription Workflows * CRM Workflows * E-Commerce User Journeys ✅ UX & Usability Testing A feature can technically work and still frustrate users. I identify friction that traditional functional testing can miss. * First-Time User Experience * Registration & Onboarding Friction * Checkout & Payment Drop-Off Analysis * Navigation & Information Clarity * Error Messages & Empty States * UI Consistency * Figma Design Validation * UX Improvement Recommendations I don’t just check whether a feature works. I test whether it works correctly, remains secure, handles real-world scenarios, and delivers a reliable user experience. If you’re building a web application, mobile app, SaaS platform, API, fintech product, or e-commerce system, I can help you identify bugs, security weaknesses, and UX problems before they impact your users or your business.
Earnings and projects
Last 6 months ÷ 6
Last 6 months: $1.3k
Billed in all: $1,409$1.4k
$1.3k in the last 6 months
Earnings, last 30 days
Skill rankings: Top 24% in Penetration Testing
Ranked by MRR among everyone on Upwork with the skill.
- ISO 270178 freelancers · 🇦🇪 #1Top 25%🇦🇪#1 of 1
- ISO 270188 freelancers · 🇦🇪 #1Top 38%🇦🇪#1 of 1
- #9ISO 900026 freelancers · 🇦🇪 #1Top 35%🇦🇪#1 of 1
- #27ISO 1400175 freelancers · 🇦🇪 #2Top 36%🇦🇪#2 of 6
- #54Cybersecurity Tool201 freelancers · 🇦🇪 #3Top 27%🇦🇪#3 of 5
- #85Cybersecurity Monitoring277 freelancers · 🇦🇪 #3Top 31%🇦🇪#3 of 5
- #89ISO 27001326 freelancers · 🇦🇪 #2Top 27%🇦🇪#2 of 8
- #126QA Software & Testing Tools349 freelancers · 🇦🇪 #3Top 36%🇦🇪#3 of 7