9 suites run, 9 passed, 0 skipped

Every release ships with confidence, not luck.

I'm a Senior QA Engineer with nearly a decade of experience building automation frameworks, hardening release pipelines, and probing systems for what breaks — from API/mobile security testing to end-to-end automation. Currently at CHEQ, a Cantaloupe platform, working at Dhaka.

Get in touch →

LinkedIn ↗ GitHub ↗ TryHackMe ↗

describe('About', () => {

The engineer behind the assertions

I've spent close to ten years making sure software does what it promises — across fintech, digital-marketing SaaS, and POS/payment systems. That range taught me to read risk differently in each domain: a payment flow fails differently than a dashboard, and a test strategy should know the difference.

Today I work as a Senior QA Engineer at CHEQ, a Cantaloupe platform, fully remote from Dhaka, Bangladesh — owning automation strategy, API validation, and release quality across the stack.

Outside of day-to-day QA work, I mentor early-career testers through TechSisters and Codess.Cafe, write technical blog posts, speak at community events, and sharpen my security instincts on TryHackMe and through digital forensics CTFs.

experience~9 years in QA

current roleSenior QA Engineer, CHEQ

locationDhaka, Bangladesh

focus areasTest Automation · API & Mobile Security

domainsFintech · SaaS · POS/Payments

certificationsISTQB CTFL · CSM · CSD

describe('Toolchain', () => {

What I test with

API & Web Security

BOLA/IDOR Testing HMAC Signature Verification Rate Limiting & Abuse Prevention Custom Header Auth (X-Headers) OWASP API Security Top 10 Parameter Tampering Input Sanitization

Mobile Security & Reverse Engineering

APK Decompilation (JADX / APKTool) Package Directory Inspection Endpoint Discovery Static Security Analysis

Security Observability & Logging

Grafana Loki Log Analysis Audit Trail Verification Incident & Error Tracking

Testing & Performance Automation

Postman (Newman CLI) WebdriverIO Cypress Apache JMeter TestCafe Katalon Studio

Languages & Core Tech

JavaScript PHP Java REST APIs Git Virtualization (Red Hat / VMs)

Methodologies & Processes

Shift-Left Security Test Plan & Strategy Execution Bug Lifecycle Management (Jira) Agile/Scrum Events

describe('Certifications', () => {

Credentials on record

ISTQB — Certified Tester Foundation Level (CTFL)

Core testing principles, test design techniques, and lifecycle fundamentals.

✓ passed

Certified Scrum Master (CSM)

Agile facilitation and Scrum team leadership.

✓ passed

Certified Scrum Developer (CSD)

Technical Agile practices for delivery teams.

✓ passed

describe('Experience', () => {

Where I've shipped quality

Current

Senior QA Engineer

CHEQ — a Cantaloupe Platform · Remote

Own end-to-end and API test automation using WebdriverIO (TypeScript), driving release confidence across the platform.

[dates]

[Add your prior role title]

[Company name]

Fintech / digital-marketing SaaS / POS & payments background — drop in the specific role, scope, and one or two measurable wins here.

describe('Highlights', () => {

Things I've built on the side

Automation Pipeline

Zero-touch content pipeline

A fully automated video pipeline that generates and publishes TOEFL practice content end to end — local LLM for content generation, scripted rendering, TTS narration, and automated upload, with no manual steps.

Python Ollama / Qwen3 ffmpeg YouTube Data API

Digital Forensics

Windows forensics CTF (hard)

Solved a multi-stage credential-recovery chain — DPAPI decryption through to a VeraCrypt volume — by hand-rolling the cryptographic steps in Python and carefully inspecting the recovered output for the flag.

Python DPAPI VeraCrypt Forensics

describe('Community', () => {