Senior QA Engineer – Non-Functional Security

Hyperlayer is the intelligent banking platform built for the agentic economy: the financial control layer that sits above banks' existing cores, enabling next‑generation Smart Accounts, without ripping anything out. From a single integration, we give financial institutions a secure rules and orchestration engine that lets them design, launch and scale hyper‑personalised products in weeks while preserving stability, compliance and control. And there's nothing like us anywhere in the world.

Hyperlayer works with Tier 1 and Tier 2 FIs across the UK, US, EMEA and Hong Kong, with an award‑winning UK consumer app (Hyper Jar) sitting in the group. We're creating the fintech category that every bank in the world needs: programmable, governed, agent‑ready accounts. Your job is to make sure our audiences know that.

Hyperlayer is the intelligent banking platform built for the agentic economy: the financial control layer that sits above banks' existing cores, enabling next‑generation Smart Accounts, without ripping anything out. From a single integration, we give financial institutions a secure rules and orchestration engine that lets them design, launch and scale hyper‑personalised products in weeks while preserving stability, compliance and control. And there's nothing like us anywhere in the world.

Hyperlayer works with Tier 1 and Tier 2 FIs across the UK, US, EMEA and Hong Kong, with an award‑winning UK consumer app (Hyper Jar) sitting in the group. We're creating the fintech category that every bank in the world needs: programmable, governed, agent‑ready accounts. Your job is to make sure our audiences know that.

• We're hiring a Senior Quality Engineer to lead non‑functional testing across Hyperlayer, with performance as the core focus and security as a strong secondary skill.
• Banks and financial institutions rely on our platform, and Hyper Jar serves consumers directly, so we need to know how our systems behave under load, under attack and when dependencies fail.
• You'll make non‑functional testing routine: designing tests, setting baselines with engineering, and building them into our pipelines and release certification.
• You'll also bring strong functional and API testing skills in Java and REST Assured, so your tests are built around realistic payment journeys and business risk.
• You'll report into the Head of Solution Architecture & QA and work closely with our Principal Quality Engineer, Release Engineering and Dev Ops.
• This role is predominantly office‑based in Paddington, London.

• Define non‑functional targets with engineering and product: p95/p99 latency, throughput, concurrency and error‑rate thresholds.
• Design and run load, stress, soak and spike tests as code (e.g. Gatling, JMeter, k6) for critical API, orchestration and payment paths.
• Set performance baselines and add automated regression gates to CI/CD and release certification.
• Find bottlenecks using APM and observability tools (e.g. Datadog, Grafana), and work with engineers to fix them.
• Test APIs against the OWASP API Security Top 10, especially authentication, authorisation and data exposure.
• Add automated security checks (e.g. OWASP ZAP) and fuzz testing to pipelines, and support external pen tests and fix verification.
• Test behaviour when dependencies fail or slow down: timeouts, retries, idempotency and rate limiting.
• Build functional and API tests in Java and REST Assured where needed, so non‑functional tests rest on reliable functional coverage.
• Report performance and security risk clearly to inform release go/no‑go decisions.
• Create reusable tests and guides so other quality engineers can add non‑functional checks to their pods, using AI tools where they help.