Remote Application Security Engineer (Java/.NET)

Venaro; Bogotá ciudad; À distance; COP 97 097 000 - 178 011 000; Plein temps

Résumé du poste

Salvatech is seeking a hands-on Application Engineer to support a security-remediation program for a U.S. healthcare payments company. You will work with Java and .NET applications to identify and remediate security findings across repositories, following secure-coding, deployment, and compliance processes.

You will collaborate with senior engineers, upgrade dependencies, write tests, and ensure fixes move through the proper deployment path while gathering evidence for audits.

Qualifications

• 3–5 years of hands-on software engineering experience with Java and/or .NET/C#.
• Strong proficiency in at least one of Java or .NET/C#, with working knowledge of the other.
• Advanced English level (spoken and written).
• Solid grasp of application-security fundamentals (OWASP Top 10, injection, authentication/authorization, etc.).

Responsabilités

• Remediate application-security vulnerabilities in Java and/or .NET code.
• Address issues related to authentication, authorization, injection, input validation, session management, cryptography, and secrets handling.
• Upgrade vulnerable dependencies and frameworks and fix resulting breakages.
• Work across codebases and teams following secure-coding standards.
• Write and adjust tests to validate fixes and prevent regression.
• Move fixes through deployment and change-control paths.
• Capture remediation evidence for audit/compliance review.
• Triage findings and elevate architectural issues to senior staff.

Connaissances

Java

C#/.NET

Application security

Secure coding

Dependency upgrades

Testing

Git

SAST/DAST tools

Outils

Maven/Gradle

NuGet/MSBuild

Checkmarx/Fortify/Snyk/Veracode

Git

Description du poste

Salvatech is seeking a hands-on Application Engineer to support a security-remediation program for a U.S. healthcare payments company. You will work with Java and .NET applications to identify and remediate security findings across repositories, following secure-coding, deployment, and compliance processes.

You will collaborate with senior engineers, upgrade dependencies, write tests, and ensure fixes move through the proper deployment path while gathering evidence for audits.