Full-Stack .NET Developer (Security & Modernization)

EPAM Systems; United States; Remote; USD 90,000 - 120,000; Full time

Job summary

EPAM Systems is seeking a Full-Stack .NET Developer with hands-on experience across legacy .NET Framework and modern .NET (6/8+). You will help remediate security vulnerabilities, support legacy apps, and drive modernization efforts under senior guidance.

The role covers backend work with ASP.NET Core Web APIs, SQL Server, and secure data access, plus frontend tasks using HTML, CSS, JavaScript, and frameworks like React/Angular/Vue. Collaborative CI/CD and DevOps involvement are expected.

Qualifications

• 2+ years of full-stack .NET development experience.
• Strong C#, .NET Framework and SQL Server knowledge.
• Experience with ASP.NET Web Forms and MVC.
• Familiar with .NET 6/8+, ASP.NET Core, and REST APIs.
• Understanding of dependency injection.
• Security mindset with OWASP Top 10 awareness.
• Experience with at least one frontend framework (React/Angular/Vue).
• English proficiency at least B1.
• Exposure to TeamCity, Octopus Deploy, or IIS is a plus.
• HTML, CSS, and jQuery experience.

Responsibilities

• Investigate and remediate application security vulnerabilities (OWASP Top 10, SAST/DAST, SQLi, XSS).
• Support and modernize legacy ASP.NET Web Forms, MVC, WCF, and ASMX apps.
• Develop and enhance ASP.NET Core Web APIs and modern .NET services.
• Work with SQL Server, ADO.NET, EF Core/Dapper with secure data access.
• Contribute to frontend work using HTML/CSS/JS, jQuery, and SPA frameworks.
• Collaborate with DevOps for CI/CD and production deployments.

Skills

Full-stack .NET development

C# & .NET Framework

ASP.NET Core & REST APIs

Frontend skills (HTML/CSS/JS)

OWASP security awareness

Troubleshooting

English communication

CI/CD collaboration

Tools

SQL Server

ASP.NET Web Forms/MVC

React/Angular/Vue

TeamCity

Octopus Deploy

IIS

OAuth2/OIDC/JWT

Job description

We are looking for a Full-Stack .NET Developer with experience in both legacy .NET Framework and modern .NET (.NET 6/8+). You will contribute to security vulnerability remediation, legacy application support, and modernization efforts under the guidance of senior team members.

Responsibilities

• Assist in investigating and remediating application security vulnerabilities, including OWASP Top 10, SAST/DAST findings, SQL injection, XSS, and dependency risks
• Support and help modernize legacy ASP.NET Web Forms, MVC, WCF, and ASMX applications
• Participate in the development and enhancement of ASP.NET Core Web APIs and modern .NET services
• Work with SQL Server, ADO.NET, EF Core/Dapper, following secure data access practices
• Contribute to frontend development using HTML, CSS, JavaScript/TypeScript, jQuery, and modern SPA frameworks
• Collaborate with DevOps engineers on CI/CD processes and production deployments

Requirements

• 2+ years of full-stack .NET development experience
• Solid knowledge of C#, .NET Framework, and SQL Server
• Working experience with ASP.NET Web Forms and MVC
• Familiarity with .NET 6/8+, ASP.NET Core, and REST APIs
• Understanding of dependency injection
• Basic application security awareness and familiarity with OWASP Top 10
• Experience with at least one of the following: React, Angular, or Vue.js
• Good troubleshooting skills and willingness to work with legacy codebases
• English proficiency at an Intermediate level or higher (B1+)
• Nice to have Exposure to TeamCity, Octopus Deploy, or IIS
• Basic understanding of OAuth2, OIDC, and JWT
• Skills in HTML, CSS, and jQuery