Software Engineer, Security Focus

This is a fully remote position, open to applicants in Arizona.

📋 Description

• Take ownership of the complete remediation process for vulnerabilities identified through penetration tests and various security assessments, from initial triage to confirmed resolution.

• Analyze front-end and back-end session traffic by utilizing browser-based code inspection tools to pinpoint excessive or sensitive data exposure.

• Convert security findings into specific, verifiable requirements within Technical Requirements Documents (TRDs).

• Evaluate and strengthen session management practices throughout the application stack.

• Implement solutions across Ruby on Rails, React, AWS, Fargate, and containerized services.

• Evaluate and secure real-time and API-driven functionalities, including Pusher, AnyCable, and RESTful APIs.

• Record vulnerabilities, their root causes, remediation actions, and verification outcomes.

• Provide security context and terminology for FedRAMP-related discussions and requirements.

• Design, develop, and deploy features within the Ruby on Rails back end and React front end.

• Employ secure-by-design methodologies in new development initiatives.

• Engage in code reviews, testing, and technical design discussions.

⛳️ Requirements

• Over 5 years of practical software engineering experience, with extensive full-stack work across various applications and technology layers.

• Proficient in Ruby on Rails and React.

• Experience with containerized environments, AWS, and Fargate.

• Strong background in API development, particularly RESTful API design and security considerations.

• Practical experience with Pusher and AnyCable, or similar real-time messaging technologies.

• Understanding of Ruby data models and the impact of schema and query design on performance and scalability.

• More than 5 years of experience in a security engineering or closely related field.

• Demonstrated ability to remediate vulnerabilities identified through penetration testing.

• AWS Security certification(s) (e.g., AWS Certified Security – Specialty).

• General understanding of FedRAMP requirements.

• Proficient in using browser developer/code inspection tools to analyze network and session traffic.

• Capable of identifying excessive information exposure between backend and frontend and articulating the associated risks effectively.

• Ability to translate security findings into actionable design requirements for the TRD.

• Strong grasp of session management principles and common pitfalls.

• Excellent written communication skills, capable of documenting vulnerabilities, remediation strategies, and technical requirements clearly for both technical and non-technical audiences.

• Experience with Pulumi for infrastructure as code (preferred).

• Python skills (preferred).

• SQL knowledge (preferred).

• Active or eligible for security clearance (preferred).

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance plans.

• Flexible working hours and remote work options.

• Opportunities for professional development and growth.

• A collaborative and inclusive team environment.