Senior Full Stack Engineer

Movate, Inc.; Colombia; Presencial; COP 140.000.000 - 240.000.000; Jornada completa

Descripción de la vacante

Movate, Inc. is hiring a Senior Full Stack Engineer in Colombia with 6–8 years of software experience. The role emphasizes security across code, services, and infrastructure, with a focus on JVM-based backends and modern DevOps practices.

You will collaborate with AppSec, Engineering, Product, and Security Research teams to identify risks, validate findings, and drive remediation, while advancing AI-assisted secure development practices and playbooks.

Formación

• Experience identifying, validating, and remediating vulnerabilities in production software, services, APIs, infra, or software supply chain.
• Strong ability to read and reason about complex codebases, preferably Java or Kotlin or JVM-based backends.
• Experience with application security testing methods and tools (SAST/DAST/SCA) and secure coding practices.
• Advantage for AI-assisted engineering, security automation, or process improvement.
• Excellent written/spoken English and the ability to translate findings into actionable guidance.
• Bachelor’s degree in CS, Engineering, or related field, or equivalent practical experience.
• Solid understanding of cloud-native architecture, CI/CD, containers, and modern DevOps.

Responsabilidades

• Identify and prioritize meaningful security risks across first-party code, services, infrastructure, and pipelines.
• Validate vulnerability findings for exploitability, severity, and remediation priority.
• Collaborate with security and product teams to translate findings into actionable outputs and improvements.
• Move validated findings through remediation with engineering teams to reduce repeat patterns.
• Champion AI-SDLC practices and translate vulnerability classes into reusable guidance and playbooks.
• Create clear remediation guidance, engineering-ready fixes, and pull request proposals.

Conocimientos

Security engineering

Java/Kotlin

SAST/DAST/SCA

Threat modeling

CI/CD / DevOps

Communication

English (B2+)

Leadership

Cloud-native architecture

Educación

Bachelor's degree in CS/Eng or related

Herramientas

SAST

DAST

SCA

Secret scanning

Threat modeling tooling

Secure code review tools

Descripción del empleo

Job title: Senior Full Stack Engineer
Work Location: Colombia
Experience: 6–8 years
Education Qualification: High School

Roles and Responsibilities:

• Risk Identification: Identify and prioritize meaningful security risks across first-party code, services, infrastructure, build pipelines, and software supply chain components.
• Vulnerability Validation: Validate findings for exploitability, severity, affected products, business impact, and remediation priority.
• Cross-Functional Collaboration: Collaborate with Security Research and Product teams to translate novel findings, malicious component discoveries, and emerging attack patterns into research-ready outputs, product improvements, detection opportunities, and customer-facing intelligence.
• Remediation & Mitigation: Work closely with Application Security and Engineering to move validated findings through remediation and reduce repeat vulnerability patterns.
• AI-SDLC Evangelism: Champion modern AI-SDLC practices by translating recurring vulnerability classes, insecure coding patterns, and effective remediation approaches into reusable guidance, detection logic, secure coding standards, and remediation playbooks.
• Fix Implementation: Create clear remediation guidance, engineering-ready fix proposals, and pull requests where appropriate.

Required Skills & Desired Skills

• Experience: 8+ years of professional software engineering experience, including 2+ years in a Staff Engineer or equivalent technical leadership role.
• Security Expertise: Proven experience identifying, validating, and helping remediate vulnerabilities in production software, services, APIs, infrastructure, or software supply chain components.
• Code Proficiency: Strong ability to read, understand, and reason about complex codebases, preferably including Java, Kotlin, or other JVM-based backend systems.
• Tooling & Methods: Hands-on experience with application security testing methods and tools, such as SAST, DAST, SCA, secret scanning, threat modeling, secure code review, or vulnerability validation.
• AI & Automation: Practical experience using AI-assisted engineering, security analysis, or automation techniques to improve software quality outcomes.
• Communication: Ability to translate security findings into clear remediation guidance, engineering-ready recommendations, and practical risk-based priorities. Strong collaboration skills working across AppSec, Engineering, Product, or Security Research teams.
• Education: Bachelor’s degree in Computer Science, Engineering, or a related field—or equivalent practical experience.
• DevOps Culture: Solid understanding of cloud-native architecture, CI/CD workflows, build pipelines, containers, and modern DevOps practices.
• Leadership: Passion for raising the security bar through technical leadership, mentoring secure engineering practices, and continuous improvement.
• Advanced English (B2+)

Desirable Certifications:

• SANS: GSEC, GCIH, GCLD, GCID, GMON