HRMS Software Functional & Security Testing

I have a full-featured HRMS that is sitting on a dedicated test environment and I need a fresh pair of eyes to push it hard before we roll out. Your mission is to walk through the core modules—employee records, leave and attendance, plus the entire payroll flow—looking for anything that breaks, behaves oddly, or exposes sensitive data. I care about two things above all else: 1. The features must work exactly as specified. 2. No personal or payroll data should be exposed or manipulable by an unauthorized user. You’ll receive credentials to the test instance along with a short functional spec. Feel free to set up additional dummy users or roles; the environment is isolated, so you won’t harm production data. I welcome any tooling you prefer—Selenium, Postman, OWASP ZAP, manual exploratory passes—so long as the findings are clear and reproducible. Deliverables I need from you: • A concise test plan outlining scenarios you covered. • A list of defects with steps to reproduce, expected vs. actual results, screenshots or recordings where helpful. • A separate section calling out any security or privacy weaknesses, ranked by severity. • A brief summary of overall system stability and recommendations for next steps. If this sounds like the type of deep-dive QA you enjoy, let’s get started.