Security-Focused Full-Stack Engineer (Rails/React)

eVisit; Mesa (AZ); On-site; USD 120,000 - 160,000; Full time

Job summary

eVisit is seeking a hands-on full-stack Software Engineer focused on security remediation. You will own remediation of vulnerabilities found in penetration tests, digging into code, traffic, and infrastructure to fix root causes and prevent recurrence.

Initially you’ll fix security issues in our Ruby on Rails and React platform, then contribute to application development across the stack in containerized AWS/Fargate environments, applying a security-minded approach to new features and TRD-driven

Qualifications

• 5+ years of hands-on software engineering experience across multiple applications and layers.
• Experience with Ruby on Rails and React at scale.
• Experience with containerized environments, AWS, and Fargate.
• Solid API experience, including RESTful API design and security considerations.
• Hands-on with real-time messaging technologies (Pusher/AnyCable).
• Knowledge of security remediation and FedRAMP vocabulary would be beneficial.

Responsibilities

• Own end-to-end remediation of vulnerabilities surfaced by penetration tests and other assessments.
• Analyze session traffic and front-end/back-end interactions to identify data exposure and translate findings into concrete requirements.
• Feed remediation requirements into the TRD process to capture durable design requirements.
• Harden session management across the application stack.
• Work within Ruby on Rails and React codebase and across containerized services to implement fixes.
• Assess and secure real-time and API-driven features, including RESTful APIs.
• Document vulnerabilities, remediation steps, and verification results.

Skills

Ruby on Rails

React

AWS

Fargate

REST API

Pusher

AnyCable

Containerized environments

Security engineering

Penetration testing remediation

Tools

Pulumi

Python

SQL

Job description

eVisit is seeking a hands-on full-stack Software Engineer focused on security remediation. You will own remediation of vulnerabilities found in penetration tests, digging into code, traffic, and infrastructure to fix root causes and prevent recurrence.

Initially you’ll fix security issues in our Ruby on Rails and React platform, then contribute to application development across the stack in containerized AWS/Fargate environments, applying a security-minded approach to new features and TRD-driven