Remote Application Security Engineer (Java/.NET)

Salvatech; Bogotá ciudad; Presencial; COP 185.117.000 - 277.675.000; Jornada completa

Descripción de la vacante

Salvatech is seeking a Hands-on Application Engineer to join a dedicated engineering team supporting a security-remediation program for a leading U.S. healthcare payments company.

You will work directly with Java and .NET applications to identify and remediate findings across repositories, following secure-coding, deployment, and compliance processes. This role focuses on application-security remediation, secure coding, dependency upgrades, testing, and resolving vulnerabilities uncovered by

Formación

• 3-5 years hands-on software engineering with Java and/or .NET/C#.
• Strong proficiency in Java or .NET/C#, with working knowledge of the other.
• Advanced English (spoken and written).
• Solid grasp of application-security fundamentals (OWASP Top 10, injection, auth, session management).
• Experience upgrading dependencies and frameworks (Spring, .NET Framework/Core).
• Experience remediating from SAST/DAST/SCA outputs (Checkmarx, Fortify, Snyk, Veracode).
• Familiarity with Maven/Gradle, NuGet/MSBuild, and Git workflows.

Responsabilidades

• Remediate application-security vulnerabilities in Java and/or .NET/C# code.
• Address authentication, authorization, injection, input validation, session management, cryptography, and secrets handling issues.
• Upgrade vulnerable dependencies and frameworks and fix resulting issues.
• Work across multiple codebases and teams following secure-coding standards.
• Write and adjust tests to validate fixes and prevent regression.
• Move fixes through deployment and change-control processes.
• Capture remediation evidence for audit and compliance reviews.
• Triage findings and escalate architectural issues to senior SRE and lead engineer.

Conocimientos

Java

.NET/C#

English

OWASP Top 10

SAST/DAST/SCA

Git

Test automation

Herramientas

Maven

Gradle

NuGet

MSBuild

Checkmarx

Fortify

Snyk

Veracode

Descripción del empleo

Salvatech is seeking a Hands-on Application Engineer to join a dedicated engineering team supporting a security-remediation program for a leading U.S. healthcare payments company.

You will work directly with Java and .NET applications to identify and remediate findings across repositories, following secure-coding, deployment, and compliance processes. This role focuses on application-security remediation, secure coding, dependency upgrades, testing, and resolving vulnerabilities uncovered by