Senior AppSec Engineer — Rails + AWS, FedRAMP Remediation

eVisit; Redmond (WA); On-site; USD 150,000 - 190,000; Full time

Job summary

eVisit is seeking a hands-on senior security engineer who will own end-to-end remediation of vulnerabilities identified through penetration testing. You will dive into Ruby on Rails and React code, session traffic, and infrastructure to fix root causes and prevent recurrence.

As security backlog clears, you will contribute to feature development on our Rails/React platform with a security-minded approach, collaborating with engineering and design teams to translate findings into concrete TRD

Qualifications

• 5+ years of hands-on software engineering experience across multiple applications and layers.
• Working proficiency in Ruby on Rails and React.
• Experience with containerized environments, AWS, and Fargate.
• Solid API experience with RESTful design and security considerations.
• Hands-on experience with Pusher and AnyCable, or similar real-time tech.
• Knowledge of Ruby data models and performance implications.

Responsibilities

• Own end-to-end remediation of vulnerabilities surfaced by penetration tests and security assessments.
• Feed remediation requirements into the TRD to capture durable design requirements.
• Review and harden session management across the stack.
• Implement fixes in Rails/React and containerized services (AWS Fargate).
• Secure real-time and RESTful APIs, and document findings and verifications.
• Contribute security context to FedRAMP discussions and requirements.

Skills

Ruby on Rails

React

AWS

RESTful APIs

Security remediation

Session management

Pusher

AnyCable

Full-stack engineering

Tools

Pulumi

AWS Fargate

Pusher

AnyCable

Job description

eVisit is seeking a hands-on senior security engineer who will own end-to-end remediation of vulnerabilities identified through penetration testing. You will dive into Ruby on Rails and React code, session traffic, and infrastructure to fix root causes and prevent recurrence.

As security backlog clears, you will contribute to feature development on our Rails/React platform with a security-minded approach, collaborating with engineering and design teams to translate findings into concrete TRD