🔥 Live 2,847 QA engineers learning right now — Start Free Automation Roadmap →
SDET · Agentic AI · 2026

Agentic AI Testing & the AI-SDET Interview

The SDET role has changed. This is the complete, practical guide to using AI agents in test automation and to the questions that now decide AI-SDET interviews — with a question bank and tools to practise on.

Updated for 2026 · ~18 min read · by Naveed Tawargeri

01How the SDET role changed

For a decade, the SDET job was a fairly stable stack: a language (usually Java), an automation library (Selenium, now often Playwright), API testing, a framework you designed yourself, and a CI/CD pipeline to run it all. That stack has not disappeared — but in 2026 a second layer sits on top of it. Interviewers now expect you to know how to work alongside AI agents: to generate tests with them, to review what they produce, and to test the AI-powered features your own company is shipping.

The important shift is one of judgement, not tools. The market has moved from "can you write a test?" to "can you decide what to test, direct an agent to write it, and catch the agent when it is wrong?" AI removed some of the typing; it raised the bar on design and review. That is the lens to bring into every answer below.

✍️ Add your first-hand note Replace this box with a short, real story: the first time you used an AI coding agent on your own suite, what it got right, and where it broke. First-hand experience is what makes this page rank and what makes an interviewer trust you. (Delete this box once you add yours.)

02AI coding agents & the Planner-Generator-Healer pattern

The single most common AI question in an SDET screen now is some version of: "How do you use AI coding agents for test automation?" The strong answer is not a tool name — it is a pattern. The pattern that has emerged for using agents on a test suite has three roles:

🧭

Planner

Decides what to test and in what order — reads the story and acceptance criteria and proposes coverage: happy path, negative, boundary, security, accessibility.

⌨️

Generator

Writes the actual test code from the plan — page objects, API assertions, data setup — one file at a time so a human can review each.

🩹

Healer

Watches runs, and when a locator or assertion breaks because the app changed, proposes a repair instead of leaving a red pipeline.

Why this pattern impresses: it shows you know where AI helps (volume, boilerplate, first drafts, self-healing brittle locators) and where a human still owns the decision (what is worth testing, whether the generated assertion is meaningful, whether a "heal" is hiding a real bug). The failure mode interviewers listen for is the candidate who lets the generator run unchecked and ships duplicated or meaningless tests.

How to talk about it well

  • Generate one file at a time and review it — never accept a bulk dump of tests.
  • Pin selectors to data-testid so generated and healed locators stay stable.
  • Run a self-critique pass — ask the agent to critique its own output against your rubric before you merge.
  • Reject anything that duplicates existing coverage — more tests is not better tests.
  • Keep the healer on a leash — a heal that changes an assertion should trigger human review, because it may be masking a regression.

03MCP for testers

MCP (Model Context Protocol) is an open protocol that lets any LLM call any tool through one standard interface, instead of every model needing custom glue for every tool. It has become common enough that "explain MCP" is now its own interview question for AI-adjacent SDET roles.

For a tester, MCP matters in two directions. First, it is how an AI agent reaches your world — your CI, a browser, a database, your test-management tool — through MCP servers that expose those as callable tools. Second, and more interview-relevant, when you are asked to test an MCP-connected agent, you are really testing three things:

  • Tool discovery — does the agent correctly find the tools available for the current context and user?
  • Tool selection — given a goal, does it pick the right tool, or make unnecessary calls?
  • Permission & constraint checking — does it respect what the current user is allowed to do, and refuse tools it should not use?

You do not need to have built an MCP server to answer well. You need to show you understand that an agent with tools is a system with a new attack surface, and that testing it means verifying the boundaries as much as the happy path.

04Evals: the unit tests of AI

This is the concept that separates candidates who have used AI from candidates who have only read about it. Traditional tests use a fixed assertion: input X gives exactly output Y. But an LLM is non-deterministic — the same prompt can give different, still-valid answers — so a hard assertEquals does not work. The answer is evals: the unit tests of AI systems.

An eval scores an AI's output rather than checking it for exact equality. The main approaches:

Ground-truth (golden set) evals

Build a curated dataset of 50–200 known-good input/output pairs — a "golden set". Run the AI over it and score how close each answer is to the reference. This is your regression suite for a model or prompt: run it on every change and watch the score.

LLM-as-a-judge

Use a second model to grade the first model's output for quality, correctness or reasoning, against a rubric you write. It scales far past what humans can grade by hand — but you validate the judge itself with periodic human spot-checks so you are not trusting a grader you never checked.

Component evals for agents

For agentic systems you go beyond "was the final answer right?" and score the process:

  • Tool-use evaluation — did the agent call the correct tool for each step, and efficiently?
  • Process adherence — did it follow the intended plan, or skip a required step such as verifying a fact before using it?
  • Adversarial evaluation — feed it contradictory information or instructions to ignore its safety rules, and check it stays robust.

Metrics worth naming

Grounding (does the answer cite the source it was given?), correctness, relevance, toxicity, latency per step, and cost per call. In production you also track escalation rate, resolution rate and user-satisfaction score. Being able to reel off two or three of these signals real hands-on experience.

Interview tip If you say one sentence about AI testing, make it this: "Evals are the unit tests of AI — I score against a golden set and use an LLM-as-judge, with human spot-checks, and I run them on every prompt change." It lands immediately as someone who has done the work.

05Prompt engineering for test cases

Generating test cases from a user story is now a practical exercise you may be asked to do live. The reliable structure is a four-part prompt — Role, Context, Task, Format:

# Role–Context–Task–Format prompt for test generation Role: You are a senior SDET (ISTQB-Advanced). Context: [paste the user story + acceptance criteria + tech stack + any compliance constraints, e.g. PII handling] Task: Produce 15 test cases covering happy path, negative, boundary, security and accessibility. Then self-critique the set. Format: A markdown table (ID | Title | Type | Steps | Expected), followed by a short self-critique of gaps.

What turns this from a party trick into an engineering skill is the review discipline around it: run a self-critique pass, check the output against a rubric (are negatives and boundaries actually covered? any duplicates? any missing security or accessibility case?), and only then fold the survivors into your test-management tool. The prompt drafts; you decide.

✍️ Link your own tool You built an AI Test Case Generator — link it right here so readers can try this pattern live, and so the pillar sends internal link authority to it. Replace this box with that link once the URL is set.

06Testing LLM-powered features

More products now ship an LLM inside them — a chatbot, a summariser, a "generate with AI" button. Testing those features is a distinct skill, because the usual assumptions break:

  • Non-determinism — the same input can produce different valid outputs, so you assert on properties (does it cite a source? is it under N tokens? is it on-topic?) not exact strings.
  • Hallucination & grounding — verify the answer is supported by the provided context, not invented. Grounding checks compare the output against the source documents.
  • Prompt injection — a user can embed "ignore your instructions" in their input; test that the feature resists it. This is the adversarial eval from section 4, applied to a product.
  • Toxicity & safety — check the feature refuses harmful requests and does not emit unsafe content, across a battery of red-team prompts.
  • Cost & latency — these are now test concerns; a feature that is correct but too slow or too expensive still fails.

The mental model to bring: you are no longer testing a function with one right answer, you are testing a probabilistic system against a set of properties and risks. Frame it that way and you will stand out.

07AI governance & risk in QA

The senior signal in an AI-SDET interview is judgement about risk. Expect at least one question on governance: how do you keep an AI-assisted testing process trustworthy? Points worth making:

  • Human-in-the-loop on merge — AI can draft and heal, but a human approves what enters the suite and what a "heal" changes.
  • Traceability — keep prompts, model versions and golden sets in version control, so a test change is auditable and reproducible.
  • Data handling — do not paste secrets, PII or proprietary code into a model that is not approved for it; know your company's boundary.
  • Regression on the AI itself — evals run in CI so a prompt or model change that degrades quality is caught before release, exactly like a normal regression.

You do not need to have written a governance policy. You need to show you would not let an unreviewed agent silently rewrite the test suite — that instinct is what separates a senior answer from a junior one.

08How to prepare — a focused 30-day plan

You cannot fake hands-on AI experience in an interview, so build a little of it:

  • Week 1 — fundamentals stay sharp. Drill core Selenium, Java and API questions. AI augments these; it does not replace them. Use the interview simulators below.
  • Week 2 — one real agent project. Use an AI coding agent to generate a small Playwright or REST-Assured suite end to end. Note where it broke — that story is your best interview material.
  • Week 3 — learn evals. Build a tiny golden set (even 20 pairs) for a prompt, and try an LLM-as-judge. Read up on MCP at a high level.
  • Week 4 — practise out loud. Run full mock rounds, mixing traditional and AI questions, and rehearse the Planner-Generator-Healer and evals answers until they are automatic.

Practise these, don't just read them

Drill the fundamentals and run a full timed mock — the AI questions land best on top of solid basics.

09AI-SDET question bank

Sample questions across the topics above, with tight answers you can adapt. Click to reveal.

How do you use AI coding agents for test automation?Agents
Describe the Planner-Generator-Healer pattern: the agent plans coverage from the story, generates test code one file at a time, and heals brittle locators when the app changes. Stress the review discipline — you generate incrementally, pin selectors to data-testid, run a self-critique pass, and reject duplicated or meaningless tests. The point is directed use with human review, not letting it run unchecked.
What is MCP and how would you test an MCP-connected agent?MCP
MCP is an open protocol letting any LLM call any tool through a standard interface. Testing an MCP agent means verifying tool discovery (does it find the right tools for this user/context?), tool selection (right tool for the goal, no wasteful calls) and permission/constraint checks (does it respect what the user may do and refuse tools it should not use?). Treat the tool surface as a new attack surface.
How do you test a non-deterministic LLM feature?LLM testing
You cannot assert exact output. Assert on properties instead — grounding (is it supported by the given context?), correctness, on-topic relevance, token/latency budget, and safety. Back it with evals: a golden set scored on every change plus an LLM-as-judge validated by human spot-checks. Add adversarial cases for prompt injection.
What are evals and why do you need them?Evals
Evals are the unit tests of AI. Because output is non-deterministic, you score it — against a golden dataset of known-good pairs, or with an LLM-as-judge against a rubric — and track grounding, correctness, tool-use accuracy and toxicity. They run on every prompt or model change to catch regressions, exactly like a normal test suite.
An AI-generated test is passing but you suspect it's meaningless. What do you do?Judgement
Check whether the assertion actually verifies behaviour or just mirrors the implementation, whether it duplicates existing coverage, and whether it would fail if the feature broke (mutate the code and see). If it does not fail on a real defect, it is a false-confidence test — rewrite or delete it. This is the review instinct interviewers are probing for.
How do you keep an AI-assisted testing process trustworthy?Governance
Human-in-the-loop on merge; version-control prompts, model versions and golden sets for traceability; a clear data boundary (no secrets or PII into unapproved models); and evals in CI so a degrading prompt or model is caught before release. AI drafts and heals — a human owns what ships.
Do you still need Selenium and Java if AI writes tests?Fundamentals
Yes. AI augments the SDET role; it does not remove the fundamentals. You still need automation, a language, API testing, framework design and CI/CD — because you have to review, debug and design what the agent produces. The strongest candidates pair solid fundamentals with real AI-agent experience.

10Frequently asked questions

What is agentic AI testing?

Agentic AI testing has two sides. First, using AI agents to help create and maintain tests — an agent that plans coverage, generates test code, runs it, reads failures and repairs the tests. Second, testing agentic systems themselves — evaluating an autonomous, tool-using AI on whether it plans correctly, calls the right tools, follows the intended process and stays safe under adversarial input.

What is the Planner-Generator-Healer pattern?

It is a three-role way to use AI coding agents for test automation. A planner decides what to test and in what order, a generator writes the actual test code, and a healer watches for failures and repairs brittle locators or assertions when the app changes. Naming this pattern in an interview shows you understand where AI helps and where a human still reviews.

What is MCP and why should a tester care?

MCP (Model Context Protocol) is an open protocol that lets any LLM call any tool through a standard interface. For testers it matters because it is how AI agents connect to your test tools, CI, browsers and data — and because testing an MCP-connected agent means verifying tool discovery, permission checks and safe tool use.

What are evals in AI testing?

Evals are the unit tests of AI systems. Instead of a fixed assert, you score an AI's output against a golden dataset of known-good answers, or use a second model as a judge, and track metrics like grounding, correctness, tool-use accuracy and toxicity. Evals run on every prompt or model change to catch regressions.

Do I still need Selenium and Java for an AI-SDET role?

Yes. AI augments the SDET role; it does not remove the fundamentals. You are expected to know automation (Selenium or Playwright), a language (usually Java), API testing, framework design and CI/CD, and then layer AI skills on top. The strongest candidates pair solid fundamentals with hands-on AI-agent experience.

How do I prepare for an AI-SDET interview in 2026?

Keep your core SDET skills sharp, then build one real project using an AI coding agent end to end, learn how to evaluate an LLM or agent (golden sets and LLM-as-judge), understand MCP at a high level, and practise prompt patterns for generating test cases. Be ready to discuss where AI failed you and how you caught it — that judgement is what interviewers probe.

Agentic AI in testing moves fast — this guide is reviewed periodically. Tool names change; the patterns (Planner-Generator-Healer, evals, MCP) are the durable part.

Related guides & practice