Security-Driven Full-Stack Engineer (Rails/React)

eVisit; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

eVisit is seeking a hands-on full-stack Software Engineer focused on security remediation. You will own vulnerability remediation from pentests, dig into code, session traffic, and infrastructure to fix root causes, and help translate findings into concrete TRDs.

As backlog tightens, you will contribute to Rails and React development, applying a security-minded perspective to features and code quality across containers (AWS, Fargate).

Qualifications

• 5+ years of hands-on software engineering across multiple applications and layers.
• Proficiency in Ruby on Rails and React.
• Experience with containerized environments, AWS, and Fargate.
• Solid API design and security considerations.

Responsibilities

• Own end-to-end remediation of vulnerabilities surfaced by penetration tests and security assessments.
• Analyze session traffic and identify exposure; translate findings into concrete TRD requirements.
• Feed vulnerability findings and remediation requirements into the TRD process.
• Review and harden session management across the application stack.
• Work across Rails/React codebase and containerized services (AWS, Fargate) to implement fixes.
• Assess and secure real-time and API-driven features, including Pusher/AnyCable and RESTful APIs.
• Produce clear documentation of vulnerabilities, remediation steps, and verification results.
• Contribute security context to FedRAMP-related discussions with compliance and engineering teams.

Skills

Ruby on Rails

React

AWS

Fargate

RESTful APIs

Security remediation

Pusher

AnyCable

Job description

eVisit is seeking a hands-on full-stack Software Engineer focused on security remediation. You will own vulnerability remediation from pentests, dig into code, session traffic, and infrastructure to fix root causes, and help translate findings into concrete TRDs.

As backlog tightens, you will contribute to Rails and React development, applying a security-minded perspective to features and code quality across containers (AWS, Fargate).