Software Engineer, Security Focus

This is a fully remote position, open to applicants in Arizona.

📋 Description

• Take ownership of the complete remediation process for vulnerabilities identified in penetration tests and other security assessments, managing everything from triage to verified resolution.

• Examine front-end and back-end session traffic utilizing browser code inspection tools.

• Detect excessive or sensitive information exposure and convert findings into design and engineering specifications.

• Incorporate remediation specifications into the Technical Requirements Document (TRD) process.

• Review and enhance session management throughout the application stack.

• Apply fixes across Ruby on Rails, React, AWS, Fargate, and containerized services.

• Evaluate and secure features driven by Pusher, AnyCable, and RESTful APIs.

• Record vulnerabilities, root causes, remediation actions, and verification outcomes.

• Provide security insights during FedRAMP-related discussions.

• Design, develop, and deploy application features for the Ruby on Rails back end and React front end.

• Implement secure-by-design principles in new development initiatives.

• Engage in code reviews, testing, and discussions regarding technical design.

⛳️ Requirements

• A minimum of 5 years of hands-on software engineering experience, demonstrating broad full-stack proficiency across various applications and technology layers.

• Proficient in Ruby on Rails and React.

• Experience with containerized environments, AWS, and Fargate.

• Strong background in APIs, including RESTful API design and security considerations.

• Practical experience with Pusher and AnyCable, or similar real-time messaging technologies.

• Knowledge of Ruby data models and the impact of schema and query design on performance and scalability.

• At least 5 years of experience in a security engineering or closely related position.

• Demonstrated success in remediating vulnerabilities discovered through penetration testing.

• AWS Security certification(s) (e.g., AWS Certified Security – Specialty) is preferred.

• Basic understanding of FedRAMP.

• Proficient in using browser developer/code inspection tools to analyze network and session traffic.

• Capable of identifying excessive information exposure between the backend and frontend and articulating the associated risks clearly.

• Able to translate security findings into actionable design specifications for TRDs.

• Comprehensive understanding of session management principles and common pitfalls.

• Excellent written communication skills for documenting vulnerabilities, remediation strategies, and technical requirements.

• U.S. citizenship is mandatory.

• Must be able to pass a federal background check and achieve a Public Trust determination.

🏝️ Benefits

• Competitive salary and comprehensive benefits package.

• Opportunities for professional development and growth.

• Flexible work hours and remote work options.

• Engaging work environment with a focus on innovation and collaboration.