I'm Hismon Tam, a QA engineer with over 8 years of professional experience in software quality assurance, user
acceptance testing, and software development. I specialize in crafting robust testing strategies and integrating
QA processes seamlessly into DevOps workflows to ensure digital products are not only functional but secure.
With a strong technical foundation in tools and languages such as Cypress, JavaScript, Java, Python, Postman,
Jenkins, Docker, MySQL, Azure, and AWS, I build effective testing frameworks that drive customer satisfaction and
business success. My international experience across the US, Hong Kong, and the UK in FinTech, B2C SaaS, IoT, and
POS sectors has shaped a well-rounded and adaptable QA mindset.
In parallel with my QA career, I’m actively expanding my skill set into the field of Cybersecurity/Secuity Testing
Skills. I’m currently learning and practicing skills in:
This journey is helping me combine my strengths in QA and development with a growing knowledge of cybersecurity,
allowing me to contribute to secure, high-performing software in modern IT World environments.
💼 Professional Experience
Software QA Tester | Nourish Care
Oct 2024 – Present | Bristol, UK
Designed Cypress test scripts – reduced regression testing time by 30%
As part of my CompTIA Security+ certification preparation, I've completed hands-on labs focusing on real-world cybersecurity scenarios. These labs enhance my understanding of various attack techniques, social engineering tactics, and foundational security concepts.
Completed Labs:
Lab 1: Identifying Different Cyber Attacks
Analyzed common cyber attacks such as phishing, DoS, MiTM, and password attacks. Documented each attack’s characteristics, real-world examples, and prevention methods.
Lab 2: Social Engineering Techniques and Exploits
Explored social engineering tactics including pretexting, baiting, phishing, and tailgating. Simulated exploit scenarios and analyzed case studies to understand human factors in cybersecurity.
I document and reflect on my cybersecurity learning journey, including hands-on labs, capture-the-flag (CTF) walkthroughs, tool usage, and exam prep notes. These are part of my ongoing self-study and practical skills development.
