Senior .NET Developer

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Design and implement features and improvements using C#/.NET (.NET Framework, modern .NET, ASP.NET Core, Web API, and MVC).

• Troubleshoot and resolve bugs, enhance SQL Server routines, and uphold legacy systems (IIS, Windows Server), ensuring the reliability of financial processing.

• Recognize, evaluate, and address code and architecture vulnerabilities, including OWASP Top 10, SQL Injection, XSS, CSRF, SSRF, and IDOR/BOLA.

• Assess and establish secure authentication and authorization mechanisms (OAuth 2.0, OpenID Connect, JWT, and integrated authentication).

• Rectify insecure SQL queries, safeguard sensitive data, and implement measures against unauthorized access and operational tampering.

• Perform security- and quality-oriented code reviews.

• Introduce automated security assessments and management of vulnerable dependencies (SAST, DAST, SCA) within CI/CD pipelines using SonarQube and Snyk.

• Develop and sustain regression and automated testing.

• Ensure transactional integrity, idempotency, traceability, and access segregation within financial processes.

• Safeguard fund, portfolio, and position data while maintaining logs and audit trails as technical proof for audits and regulatory compliance.

⛳️ Requirements

• 7–10 years of experience in software development, with a minimum of 5 years of substantial experience in the C#/.NET ecosystem.

• Practical, validated experience in application security and addressing code vulnerabilities.

• Proficient in C# (.NET Framework, .NET Core, ASP.NET Core, Web API, and MVC).

• Advanced expertise in SQL Server (T-SQL, stored procedures, transactions, permissions, and performance optimization).

• Familiarity with API security (OAuth 2.0, OpenID Connect, and JWT) and OWASP Top 10 principles.

• Understanding of software architecture (SOLID, Clean Architecture, and API design) along with automated testing practices.

• Hands-on experience in supporting and integrating applications in legacy systems (IIS and Windows Server).

• Knowledge of incorporating security into CI/CD pipelines, Git, and static analysis tools (SonarQube, Snyk, or similar tools).

• Experience in implementing data security measures (encryption, TLS, secrets management, and audit logs).

• Relevant differentiators include knowledge of or experience with financial market business rules (investment funds, portfolios, positions, processing, and reconciliation).

• Technical knowledge of the OWASP ASVS 5.0 guide and the NIST SSDF framework.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health and wellness benefits.

• Opportunities for professional development and continuous learning.

• Flexible working hours and remote work options.

• Supportive and inclusive company culture.