Verified IT Work Experience Program

API Automation Testing & Postman Test Scripting Internship

Build automated API regression frameworks, cryptographic HMAC pre-request scripts, Ajv JSON schema gates, and Newman CI/CD quality gates.

3 - 6 Months
Online / On-site
Experience Letter + LOR
1-on-1 Lead Mentorship
Apply for Internship Download Brief

Role Overview

Step into the role of a Software Development Engineer in Test (SDET). In this API Automation Testing & Postman Test Scripting Internship, you will build automated API testing frameworks across live microservice endpoints. Operating within structured agile sprints, you will write advanced JavaScript pre-request scripts, master Chai.js assertions, enforce Ajv JSON schema contracts, automate OWASP security fuzzing, and build automated Newman quality gates in GitHub Actions.

Tools & Stack You Will Use

REST API Testing Postman Workspace Hierarchy JavaScript Pre-Request Scripting Cryptographic Auth (HMAC-SHA256) Chai.js BDD Assertions Ajv JSON Schema Validation OWASP API Security Fuzzing Newman CLI & GitHub Actions

What You Will Receive

  • Verified Experience Certificate: Company-issued credential recognizing duration.
  • Letter of Recommendation (LOR): Signed recommendation from tech lead for top performers.
  • Production GitHub Repos: Live pull requests, commits, and verified public repositories.
  • Interview & Placement Support: Direct client interview opportunities & referrals.

Eligibility & Candidates

  • Final year & pre-final engineering/IT students
  • Fresh graduates looking for company experience
  • Career switchers seeking real-world portfolios

Commercial Projects You Will Build

Real-world product blueprints and enterprise deliverables

1 Workspace Architecture & Dynamic Variable Hierarchy

Live Milestone
  • Postman variable inheritance hierarchy: Global, Environment, Collection, Data, and Local scopes
  • Dynamic pseudo-variables ({{$guid}}, {{$randomEmail}}) and multi-tenant environment configurations
  • Git-backed collection workflows, team collaboration workspaces, and zero-hardcoded configuration values
  • Automating dynamic correlation ID injection and centralized request logging headers

2 Pre-Request Scripting & Cryptographic Auth Handshakes

Live Milestone
  • Node.js virtual sandbox execution lifecycle: Pre-request script -> Network dispatch -> Test execution
  • Generating dynamic timestamps, nonces, and cryptographic HMAC-SHA256 request signatures with CryptoJS
  • Automated OAuth 2.0 token handshakes, refresh token cycling, and dynamic JWT authorization header injection
  • Handling dynamic request mutation, request signing, and payload tampering checks

3 Chai.js Assertions & Ajv JSON Schema Contracts

Live Milestone
  • BDD assertion writing using pm.expect() across status codes, response headers, and SLA latencies (<350ms)
  • Deep JSON body assertions: Object key verification, type constraints, and array property validation
  • Validating API contracts using Ajv (Another JSON Schema Validator) against JSON Schema Draft-07 specs
  • Dynamic variable extraction: Capturing runtime identifiers and chaining data into downstream requests

4 Data-Driven Testing (DDT) & Dynamic Workflows

Live Milestone
  • Data-Driven Testing (DDT) using external CSV and JSON matrices for boundary and edge-case testing
  • Controlling execution sequences dynamically with postman.setNextRequest() branching and loops
  • Implementing asynchronous polling loops to monitor long-running background export jobs
  • Negative testing matrices: Injecting invalid payloads, boundary violations, and malformed inputs

5 OWASP API Security Top 10 Automated Fuzzing

Live Milestone
  • Testing for Broken Object Level Authorization (BOLA/IDOR) with swapped authorization tokens
  • Testing Broken Authentication: Expired tokens, stripped headers, and algorithm downgrade attacks
  • Detecting Mass Assignment vulnerabilities and unrestricted parameter binding on user updates
  • Validating API rate limiting thresholds (HTTP 429 Too Many Requests) and resource consumption quotas

6 Newman CLI, GitHub Actions CI/CD & Final Defense

Live Milestone
  • Headless execution with Newman CLI runner: Command flags (--bail, --reporters, --env-var)
  • Generating visual HTML test reporting dashboards using newman-reporter-htmlextra
  • Constructing GitHub Actions CI/CD workflows to execute Newman on every pull request
  • Commercial Capstone Defense: Enterprise Microservices Automated Regression Suite & CI/CD Quality Gate

Agile Work Culture & Daily Routine

How you collaborate inside your developer pod each week

1

Daily Standups & Sprints

Participate in 15-minute morning standups, track sprint backlog items in Jira, and define daily feature goals.

2

Feature Engineering

Write clean, modular code following design patterns, database migrations, and API contract specifications.

3

PR Reviews & Quality Gates

Submit GitHub pull requests, receive 1-on-1 feedback from senior tech leads, and pass automated CI test pipelines.

4

Cloud Staging & Demo

Deploy live containerized features to cloud staging environments and demonstrate working software during sprint reviews.

Limited Seats Per Batch

Start Your Professional Journey Today

Join our API Automation Testing & Postman Test Scripting Internship and gain verified company work experience, senior mentorship, and a production-grade portfolio.

Apply for Internship Explore All Tracks