Security-Driven Full-Stack Engineer (Rails + React)

eVisit; Colorado; Vor Ort; USD 120.000 - 180.000; Vollzeit

Zusammenfassung

eVisit is seeking a hands-on Full-Stack Software Engineer focused on security remediation. You will own vulnerability remediation from discovery to verified fixes, work on Rails/React platforms, and influence TRD inputs to ensure durable security design.

As backlog tightens, contribute to secure feature development across the stack, including AWS-Fargate deployments and real-time components. The role emphasizes security-first software engineering, code reviews, and collaboration with compliance

Qualifikationen

• 5+ years of hands-on software engineering experience across multiple applications and layers.
• Proficiency with Ruby on Rails and React.
• Experience with containerized environments (AWS Fargate).
• Solid API design and security considerations for RESTful APIs.
• Hands-on with real-time technologies like Pusher and AnyCable.
• Understanding of Ruby data models and scalable schema/query design.

Aufgaben

• Own end-to-end remediation of vulnerabilities surfaced by penetration tests and other security assessments, from triage through verified fix.
• Analyze traffic and session data to identify exposures and translate findings into concrete design and engineering requirements.
• Feed remediation findings and requirements into the TRD process to create durable design controls.
• Review and harden session management across the application stack.
• Work across Rails/React codebase and containerized services (AWS, Fargate) to implement fixes at application and infrastructure levels.
• Assess and secure real-time and API-driven features, including those built on Pusher and AnyCable, and RESTful APIs.
• Produce documentation of vulnerabilities, root causes, remediation steps, and verification results.
• Contribute security context to FedRAMP-related discussions with compliance and engineering teams.

Kenntnisse

Ruby on Rails

React

AWS

Fargate

RESTful APIs

Pusher

AnyCable

Security engineering

Penetration testing remediation

Code inspection

Tools

Docker

Jobbeschreibung

eVisit is seeking a hands-on Full-Stack Software Engineer focused on security remediation. You will own vulnerability remediation from discovery to verified fixes, work on Rails/React platforms, and influence TRD inputs to ensure durable security design.

As backlog tightens, contribute to secure feature development across the stack, including AWS-Fargate deployments and real-time components. The role emphasizes security-first software engineering, code reviews, and collaboration with compliance