Hira A

Quality Assurance & Data Integrity Lead - ToolPotion.ai

Aug 2026 - Present • 2 mos

Lead QA Architect directing quality engineering, catalog data integrity audits, and security threat interception across a production 28,000+ record directory infrastructure. Logged 100+ defects across two full audit cycles using structured heuristic sweeps. Key Achievements & Verification Scope: • Systematic Data Cleansing at Scale: Designed heuristic detection routines that identified and purged 190+ fraudulent, dead, and spoofed listings in production in a single pass. • Malicious Threat Elimination: Neutralized 4 active platform security risks, intercepting phishing domains, malware distribution URLs, and unauthorized gambling redirects before live user exposure. • Forensic Defect Clustering: Traced 5 recurring defect clusters back to shared architectural origins (including documentation-subdomain routing bugs affecting 5 major frameworks), eliminating duplicate tickets and accelerating developer remediation. • Data Pipeline & Scraping Verification: Audited 7-stage ETL ingestion pipelines, validating URL-healing link recovery mechanisms, proxy cycling, dynamic rate-limiting thresholds, and schema-strict JSON database writes. • Component & UI Stability: Conducted 34+ hours of structured exploratory testing, surfacing 20 critical and major defects across authentication, navigation states, and catalog management.

Lead Quality Assurance Engineer - PharmaConnect

Aug 2026 - Present • 2 mos

Lead QA Architect overseeing systems verification, data isolation, and security integrity for PharmaConnect, an enterprise multi-tenant B2B distribution platform. Directed end-to-end testing across 20 exhaustive user journeys and documented 75+ defects with full API-level reproduction evidence. Key Achievements & Verification Scope: • Neutralized Critical P1 Security Vulnerabilities: Intercepted authorization bypasses on deactivated accounts (CWE-284), preventing session persistence and unauthorized tenant data access. • Audited Financial Transaction & Ledger Integrity: Uncovered unvalidated payment reconciliation flows capable of corrupting balance totals, and eliminated duplicate invoice line generation through controlled fault-injection testing. • Enforced Checkout & Business Logic Integrity: Blocked stale promotional pricing exploitation by validating server-side recalculation rules, and resolved critical RBAC permission bleed across operational and administrative personas. • Validated Data Isolation & Catalog Infrastructure: Identified bulk import pipelines silently dropping records, resolved cross-tenant enumeration risks (enforcing 404 vs 403 responses), and prevented orphaned records from unconstrained relational deletes. • Root-Cause Forensic Analysis: Applied controlled experiments to isolate multi-line invoice discrepancies down to batch aggregations rather than surface symptoms.

Quality Assurance Lead - AI Academy Cloud

Aug 2026 - Sep 2026 • 1 mo

Quality Assurance Specialist conducting targeted pre-release security, functional verification, and concurrency testing for an enterprise executive cloud learning and certification portal. Documented 20+ defects in a single intensive audit cycle. Key Achievements & Verification Scope: • Exploitation & Gamification Security: Uncovered and patched a critical XP-inflation vulnerability in the user gamification engine, preventing unauthorized credential and badge attainment. • State Synchronization Verification: Resolved progress-tracking state desynchronization issues across 10+ core technical course tracks spanning multiple difficulty levels. • Load & Infrastructure Testing: Verified that 5+ mission-critical backend systems, video delivery pipelines, and credential verification services functioned without data degradation under simulated peak user load. • Component-Level Auditing: Tested 31 Content Studio UI components, intercepting state loss bugs during multi-stage video uploads, course module configuration, and metadata tagging. • Access Control & Governance: Audited administrative permissions and role-based access rules to prevent unauthorized content publication and guarantee clean audit logs.