QA Lead at LDB Africa (2026-06 – Present)
Fintech startup (crypto swaps, fiat transfers, BVN/NIN-based KYC)
- Led QA for a pre-launch fintech product, running the full beta testing program across a 14-day scope compressed into 7 days.
- Coordinated daily testing prompts and tester communications via WhatsApp; owned bug report intake, triage, and escalation for the beta cycle.
- Identified and escalated critical security bugs, including a 2FA dashboard bypass, an OTP reuse vulnerability, and a state persistence bug in the KYC flow.
- Logged and tracked 20+ bugs across QA and beta cycles, maintaining structured bug IDs and severity/priority classification.
- Built the company's operations foundation from scratch: a 5-pillar Operations Charter and a combined SLA/FAQ/SOP document grounded in real bug reports.
- Supported beta coordination, security auditing, and pre-launch operations alongside Ops, Product, and Community leads ahead of B2B expansion and seed fundraising.
QA Engineer (Intern) at HNG Internship 14, QA Track (2026-04 – 2026-05)
Personal Trainer Platform Team (FitCall.me)
- Progressed through 7 competitive QA stages covering manual testing, API testing, automation, CI/CD, mobile QA, accessibility, and API security testing on live production systems.
- Built a full Python/Pytest automation suite (39 tests) for a live REST API with session-scoped fixtures, UUID-driven dynamic test data, and zero hardcoded credentials.
- Wrote and configured a GitHub Actions YAML pipeline to trigger automated tests on every push and pull request to main.
- Independently derived 22 structured test cases from 3 tickets with no formal acceptance criteria for a live mobile platform (FitCall.me).
- Conducted API security testing across 8 risk areas: authorization boundary violations, OTP reuse, rate limiting gaps, token invalidation, role confusion, oversized input injection, /dev/token exposure, and user enumeration.
- Performed accessibility testing using axe DevTools and TalkBack; documented WCAG violations and screen reader failures.
- Logged 22 bugs and 43 test cases across a v0.4 stabilisation sprint covering 9 test sections across UI, API, mobile, and security layers.
- Identified critical auth flow issues: silent password field ignore on registration, incorrect error codes on missing fields, and a forgot-password endpoint returning 201 with no email delivered.
- Produced an Auth Ambiguity and Risk Log covering 8 tickets across mobile and web flows; flagged snake_case vs camelCase field naming discrepancy in the reset-password endpoint.
