What You'll Do

• Design, write and execute test plans, test cases and requirement traceability from business/intake specifications.
• Perform API testing (functional, negative, boundary) using Postman / REST Assured / SoapUI for REST, JSON, XML/OFX and SOAP endpoints.
• Validate third-party integrations: hit/no-hit scenarios, sync vs. async (webhook) delivery, D1C identifiers, MISMO 3.4 XML and PDF print-image correctness.
• Test authentication flows - OAuth2 Bearer tokens, client certificates, Basic auth - including token/certificate expiry handling.
• Build and maintain automated regression suites and validate against mock / stubbed bureau services.
• Verify data integrity in Oracle via SQL queries.
• Log, track and re-test defects (Jira); support UAT and compliance sign-off.

Must-Have Skills

• Strong manual and API testing experience; solid understanding of REST/HTTP, JSON and XML.
• Hands-on with Postman, REST Assured or SoapUI.
• Ability to write and run SQL queries for backend validation.
• Solid grasp of STLC, test design techniques and the defect lifecycle (Jira or similar).
• Experience testing within Agile teams.

Nice-to-Have

• Test automation (Java + REST Assured / Selenium, or Python).
• Experience with OAuth2, TLS / client certificates and webhooks.
• CI/CD exposure (Jenkins / GitHub Actions) and mock/stub tools (WireMock).
• Financial services / mortgage / credit-reporting domain knowledge.
• Awareness of compliance testing (FCRA / PII data handling).
• Comfortable using AI tools (GitHub Copilot, Claude) to accelerate test-case design and automation scripting.

Soft Skills

Meticulous, with strong analytical and documentation skills, and a proactive risk communicator - critical given the regulatory, PII-sensitive nature of the data.