Senior QA Engineer - Performance & Security (Load Testing)

Hyperlayer; Greater London; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Performance bonus

25 days annual leave + bank holidays +

Birthday + tenure day benefits

Critical illness and life insurance

AXA Health Insurance + gym offers

Cycle-to-work scheme

Referral bonus scheme

Workplace nursery

Job summary

Hyperlayer, the intelligent banking platform, seeks a Senior Quality Engineer to lead non-functional testing with a core focus on performance and secondary emphasis on security. You will design tests, set baselines, and integrate them into CI/CD and release certification, working alongside our QA and DevOps teams.

The role is predominantly office-based in Paddington, London. You will bring strong Java and REST Assured skills for API testing, create automated tests for critical payment journeys,

Qualifications

• 5+ years in QA or quality engineering, including at least 3 years focused on performance testing of APIs and distributed systems.
• Hands-on experience designing and running load, stress and soak tests as code with tools such as Gatling, JMeter or k6.
• Ability to model realistic workloads and interpret results: percentiles, throughput, saturation and resource use.
• Experience diagnosing performance problems with APM, metrics, logs and traces, and explaining findings clearly to engineers.
• Practical security testing experience against the OWASP Top 10 and OWASP API Security Top 10, using tools such as OWASP ZAP or Burp Suite.
• Strong Java skills (or another JVM language) and hands-on REST Assured experience for functional API testing.
• Experience adding non-functional tests to CI/CD pipelines, with sensible thresholds that don't create noise.
• Comfortable in a fast-moving startup environment, balancing speed with the rigour needed when testing financial systems.
• Willing and able to be in our London office four days per week.

Responsibilities

• Define non‑functional targets for latency, throughput, concurrency and error-rate thresholds.
• Design and run load, stress, soak and spike tests as code for critical API and payment paths.
• Set performance baselines and add automated regression gates to CI/CD and release certification.
• Find bottlenecks using APM and observability tools and work with engineers to fix them.
• Test APIs against OWASP API Security Top 10, especially auth and data exposure.
• Add automated security checks and fuzz testing to pipelines and support external pen tests.
• Test behaviour when dependencies fail: timeouts, retries, idempotency and rate limiting.
• Build functional and API tests in Java and REST Assured to support non-functional tests.
• Report performance and security risk to inform release go/no-go decisions.
• Create reusable tests and guides for other quality engineers, using AI tools where helpful.

Skills

Performance testing

API testing

Java

REST Assured

CI/CD integration

Load testing

Security testing

OWASP ZAP

Burp Suite

Datadog

Grafana

Tools

Gatling

JMeter

k6

OWASP ZAP

Burp Suite

Job description

Hyperlayer, the intelligent banking platform, seeks a Senior Quality Engineer to lead non-functional testing with a core focus on performance and secondary emphasis on security. You will design tests, set baselines, and integrate them into CI/CD and release certification, working alongside our QA and DevOps teams.

The role is predominantly office-based in Paddington, London. You will bring strong Java and REST Assured skills for API testing, create automated tests for critical payment journeys,