Website:
complyark.com
Job details:
Comply Ark is hiring a QA Engineer to own testing across both of our products. Engineers here unit-test their own code. Everything above that is yours.
About Comply Ark
Comply Ark is a regulatory infrastructure company building software for compliance with India's data protection law, the Digital Personal Data Protection Act (DPDPA). We build two products: DataLens, an enterprise platform for finding personal data and managing compliance around it, and CookieGate, a cookie consent platform for websites in India and other countries. The company was founded by a data protection lawyer and a software architect, and is incubated at ISB DLabs and IIIT Hyderabad.
The Product
Most privacy tools need access to the very data they are meant to protect. DataLens does not. It is data-blind: DataLens scans inside the customer's infrastructure, where it finds and classifies personal data across databases, file stores and employee devices, including documents in Indian languages, and only opaque identifiers and metadata ever reach our cloud. Plaintext personal data never leaves the customer's environment, which is why banks, hospitals and other regulated enterprises can adopt it. The discovery and detection engine is already built and approaching its first release. What you will test is that engine as it ships, and the layer being built on top of it that turns discovery into compliance, from consent and Data Principal rights to breach management, retention and audit, on an architecture where one careless log line can break the product's core promise.
How We Build
We work spec-first, and AI coding tools, write most of our code. Every feature starts as a specification that sets out the legal requirement, the expected behaviour, the edge cases and the data the feature may and may not touch. Engineers build against it and unit-test their own code. Generated code can compile, pass its own tests and still be wrong, and in a product whose value depends on personal data never crossing a boundary, independent testing is what catches it.
What You Will Do
• Review specifications before build begins, flag gaps and ambiguities, and turn requirements into acceptance criteria and test plans.
• Own all testing above unit level (integration, end-to-end, regression and performance), automated and running in CI.
• Prove that the data-blind boundary holds: no plaintext personal data reaches the cloud, including through logs, error messages, telemetry and debug output, and under failures, retries and version mismatches.
• Measure detection quality for Indian identifiers such as Aadhaar and PAN, and for names and addresses in Indian languages and scripts, using labelled datasets, precision and recall tracking, and regression checks.
• Test DataLens end to end across its desktop application, the scanning application inside customer environments and the cloud application, along with its connectors to databases and file stores.
• Test compliance features as they arrive, such as consent, breach reporting, data deletion and people's rights over their data, against the specification and the law they implement.
• Test CookieGate's website crawler, cookie classification, region-aware consent SDK and tamper-evident consent ledger.
• Design tests for enterprise scale: synthetic data at volume, sampling, statistical checks and throughput measurement.
• Test access control, tenant isolation, installation and upgrades, and re-test security fixes.
• Own release readiness, with reproducible defect reports and a clear go or no-go.
What We Are Looking For
• 2+ years in QA, SDET or test engineering, including owning test automation for a product in real use. We weigh what you have caught, and how you caught it, above the number.
• Basic coding in Python, Go or JavaScript/TypeScript, enough to write automation scripts that drive an application through its interface or APIs and check the results against the spec.
• Ability to generate realistic test data for databases at volume, including edge cases and malformed values, and to query what the system did with it.
• Strong test design: boundaries, equivalence classes, state transitions, negative testing and risk-based prioritisation.
• An understanding of how multi-component systems fail: network faults, retries, partial failures and version skew.
• Everyday use of AI assistants, with the habit of checking what they produce.
• Clear written English. Your bug reports should reproduce on the first attempt.
Good to Have
• Experience evaluating ML or NLP systems.
• Testing desktop applications and installers on Windows, macOS and Linux.
• Browser-level testing of cookies, third-party scripts or consent tools.
• Performance testing with tools such as k6, Locust or JMeter.
• Security testing basics: the OWASP Top 10, authentication and authorisation, TLS.
• Ability to read one or more Indian languages besides English.
• Familiarity with the DPDPA or GDPR. Not required. You will learn the domain directly from a former data protection lawyer.
Tech Environment
Go, PostgreSQL, React and TypeScript, a Python NLP service using named-entity recognition and locally hosted language models, mutual TLS between tiers, desktop installers for Windows, macOS and Linux, and AI coding tools, primarily Claude Code.
Work Setup
Full-time, primarily work from home, with travel to our Kochi or Hyderabad office roughly once a month for team meetings, reviews and company events. You should be based within reasonable travel distance of either city.
Why Join
You will set the quality bar for two products at an early stage, work directly with both founders on the legal reasoning and the architecture, and help decide what testing means when most of the code is generated.
This Role Is Probably Not For You If
You measure your work by the number of test cases executed, you would rather run scripted manual checks than work out what could break, or you would sign off a release you cannot explain.
How to Apply
Apply here on LinkedIn, or email your CV, current location and notice period to careers@complyark.com in copy, using the subject line "QA Engineer - [Your Name]".
- Comply Ark is an equal opportunity employer and welcomes applications from people of all backgrounds.
Click on Apply to know more.
