Backend Security Engineer Mid-Senior · Full-time · Remote →

Thewebvale; Bhopal; Hybrid; INR 1,500,000 - 2,000,000; Full time

Benefits offered by this job

Remote-first

Hybrid days in Bhopal

Real client products

Direct work with founder

Learning and tooling support

Portfolio feature

Job summary

TheWebVale is seeking a Backend Security Engineer to harden backend infrastructure, enforce encryption standards, and conduct security reviews for client applications across healthcare, legal, and financial domains.

You will integrate security verification into rapid 2–3 week release cycles, perform threat assessments and automated scans, and collaborate with development teams to mitigate OWASP risks and protect data.

Qualifications

• 3–5 years of software engineering with a security focus.
• Deep knowledge of the OWASP Top 10 vulnerabilities and mitigations.
• Practical proficiency in Node.js, TypeScript, and backend systems.
• Understanding cryptographic protocols, SSL/TLS certificates, and JWT validation.
• Experience with static code analysis (SAST) and dependency auditing.
• Advocate for pragmatic security without blocking momentum.

Responsibilities

• Conduct security code reviews and automated vulnerability scans on pull requests.
• Harden authentication flows against brute-force attacks, credential stuffing, and replay.
• Implement encryption at rest and in transit for sensitive customer and patient data.
• Configure secrets management pipelines and automated API key rotation mechanisms.
• Audit cloud infrastructure and container configurations for permission misconfigurations.
• Respond to potential security anomalies and document remediation action plans.

Skills

Node.js

TypeScript

OWASP

Cryptography

Docker

REST APIs

Job description

You will harden backend infrastructure, enforce encryption standards, and conduct security reviews to protect client applications from vulnerabilities.

As a Backend Security Engineer at TheWebVale, you will ensure our client software adheres to rigorous security practices. You will protect sensitive data in healthcare applications, legal platforms, and financial tools by mitigating OWASP vulnerabilities and hardening APIs.You will work alongside our development teams to embed security verification into our two-to-three week release cycles. You will conduct threat assessments and automated scans, giving clients complete confidence in their software.

Backend Security Engineer

Security

Node.js

TypeScript

OWASP

Cryptography

Docker

REST APIs

03 Responsibilities

Your day to day.

6 things, one at a time. Keep scrolling.

• Conduct security code reviews and automated vulnerability scans on pull requests.
• Harden authentication flows against brute-force attacks, credential stuffing, and replay.
• Implement encryption at rest and in transit for sensitive customer and patient data.
• Configure secrets management pipelines and automated API key rotation mechanisms.
• Audit cloud infrastructure and container configurations for permission misconfigurations.
• Respond to potential security anomalies and document remediation action plans.

04 Requirements

What we look for.

6 things, one at a time. Keep scrolling.

• Hold 3–5 years of software engineering experience with a strong security focus.
• Demonstrate deep knowledge of the OWASP Top 10 vulnerabilities and countermeasures.
• Show practical proficiency in Node.js, TypeScript, and modern backend systems.
• Understand cryptographic protocols, SSL/TLS certificates, and JWT validation.
• Possess experience with static code analysis (SAST) and dependency auditing tools.
• Advocate for pragmatic security practices without blocking development momentum.

What you get.

thewebvale.

• Remote-first, with a Bhopal studio for hybrid days
• Real client products across many industries
• Direct work with the founder and senior team
• Learning and tooling support
• Your work featured in our public portfolio

06 How we hire

Three steps, no tricks.

• Intro chat

  A short call about what you want to work on and how you like to work.

• Work review

  Walk us through projects, code or designs you are proud of.

• Paid task

  A small paid task or pairing session, so both sides see the fit.

07 Ready?

Apply for Backend Security Engineer .

Tell us about your work. We reply to every application, usually within a few days. All open roles