βœ“ Verified QA Engineer

Tihomir Lazarevski

QA Engineer at Modirum Platforms API Security University Ambassador Penetration Tester CTF Solver Product Owner @ QA Career Assistant

Delivering end-to-end quality and security through automation, CI/CD, AI-driven testing, and real-world penetration testing.

Automation Pipeline Visual

About Me

Tihomir Lazarevski

QA Automation Engineer with 5+ years of experience building and maintaining production-grade test automation and CI/CD pipelines for complex web applications. I specialize in end-to-end quality assurance, covering frontend, backend, API, and integration testing for large-scale platforms, including e-commerce systems (Magento & Shopware) and custom web applications.

My expertise includes designing scalable automation frameworks using Robot Framework, integrating automated tests into CI/CD pipelines (Jenkins, YAML), and enabling client-triggered test execution with automated regression runs after every deployment.

In parallel, I am actively advancing in Cyber Security & Penetration Testing, developing automated vulnerability scanners and applying OWASP-focused security testing to complement traditional QA automation. I am also the founder of QAassistant.org, an AI-powered QA platform that combines automation, AI-driven testing tools, and real-world QA education into a production-ready system.

Core Skills

πŸ€–

QA Automation

Robot Framework Playwright Selenium E2E Testing Integration Testing
πŸ›‘οΈ

Security & Pentesting

OWASP Top 10 Penetration Testing SQL Injection XSS Metasploit Burp Suite Nmap
βš™οΈ

DevOps & CI/CD

Jenkins YAML Pipelines Git Linux VPS Nginx Gunicorn
🧠

AI & Product

OpenAI API Prompt Engineering Product Ownership SaaS Strategy

Portfolio & Projects

Mar 2025 - Present

πŸ” Automated Penetration Testing & Security Scanner

Designed and developed an automated penetration testing and security scanning tool that executes real vulnerability scans against web applications.

Key Responsibilities & Features

  • Built a real penetration testing scanner executing actual Python-based security scripts
  • Automated detection of SQLi, XSS, Auth issues, and Data exposure
  • Modular scanner architecture for easy extension with new attack modules
  • Structured result parsing and standardized vulnerability reporting
  • Designed for real environments with Git versioned scripts and CI/CD integration
Python Reconnaissance Custom Security Scripts Linux
Jan 2024 - Present

πŸ€– QAassistant.org – AI-Powered QA Platform

Founder and lead developer of a full-scale AI-powered QA education and automation platform.

Key Features

  • AI Test Case Generator (Functional, UI, API, Smoke)
  • AI Bug Reporter & API Test Builder
  • Credit-based system with payments and user dashboards
  • Manual & automation QA courses (beginner β†’ advanced level)
  • Automated test execution in Jenkins via YAML configuration
Flask OpenAI API Stripe SQLAlchemy Jenkins
Visit Platform β†’

⚑ E-Commerce Platforms (Magento & Shopware)

End-to-end QA for complex e-commerce platforms built on Magento and Shopware.

Core Focus

  • Integration testing with Payment providers and Shipping systems
  • Automation scripts in Robot Framework with Git versioning
  • Jenkins integration for client-triggered test runs
  • Full regression, smoke, and exploratory testing on staging environments
Magento Shopware Robot Framework Postman
Oct 2022 - Sep 2024

πŸ”‹ EV Charging Infrastructure

Validation of modern solutions for electric vehicle charging networks.

  • Automatic and manual testing of front-end, back-end, and administration consoles
  • System validation for reliable and affordable fast charging networks
  • Collaboration with cross-functional teams at IWConnect
E-Mobility System Validation Backend Testing

The System

Git
β†’
CI/CD
β†’
Automation
β†’
Security Scan
β†’
Reports

β€œQA is not a phase. It’s a system.”

Licenses & Certifications

  • Certified Information Systems Security Professional (CISSP)

    Cybrary β€’ ID CC-fa843c9d-39dd-4f5b-a07a-d58eb0ecb22e

  • Introduction to Cybersecurity

    Cisco β€’ Issued Nov 2023

  • Android App Security

    LinkedIn β€’ Issued Jul 2023

  • Penetration Testing Web Apps with Kali and Burp Suite

    LinkedIn β€’ Issued Jul 2023

  • Penetration Testing with Metasploit

    LinkedIn β€’ Issued Jul 2023

  • Security Testing: Nmap Security Scanning

    LinkedIn β€’ Issued Jul 2023