Senior Backend/API Security Engineer (Remote)

UST; Chicago (IL); On-site; USD 82,000 - 123,000; Full time

Job summary

UST is seeking a Senior Backend/API Security Developer to design, build, and secure enterprise APIs handling highly sensitive data. You will lead security practices across RESTful and GraphQL APIs on AWS, enforcing strong authentication and compliance with HIPAA, GDPR, and PCI-DSS.

This role emphasizes encryption, automated scanning, logging, and collaboration with DevOps on CI/CD pipelines. The position is remote within the US, offering a competitive compensation range and comprehensive

Qualifications

• Design secure architectures for RESTful and GraphQL APIs on AWS.
• Implement OAuth 2.0 and OIDC-based authentication and authorization.
• Maintain data protection standards (HIPAA, GDPR, PCI-DSS) through masking, tokenization, and auditing.
• Encrypt data in transit with TLS 1.3 and at rest using AWS KMS with customer-managed keys.
• Perform automated security scans and vulnerability assessments.
• Protect backend systems with rate limiting and WAF protections.
• Establish centralized logging and monitoring with CloudWatch, CloudTrail, and GuardDuty.

Responsibilities

• Design secure architectures for RESTful and GraphQL APIs on AWS.
• Enforce authentication using OAuth 2.0, OIDC, IAM, and Cognito.
• Ensure regulatory compliance with HIPAA, GDPR, PCI-DSS.
• Manage encryption in transit and at rest with TLS 1.3 and KMS.
• Conduct security audits and vulnerability assessments.
• Implement rate limiting and WAF protections.
• Establish centralized logging and monitoring with AWS services.
• Collaborate with DevOps to design CI/CD pipelines.

Skills

Python

Node.js

Java

AWS

OAuth 2.0

OpenID Connect

PostgreSQL

Education

Bachelor's degree in Computer Science or equivalent

Tools

Amazon API Gateway

AWS Lambda

Amazon Cognito

AWS IAM

KMS

CloudWatch

Job description

UST is seeking a Senior Backend/API Security Developer to design, build, and secure enterprise APIs handling highly sensitive data. You will lead security practices across RESTful and GraphQL APIs on AWS, enforcing strong authentication and compliance with HIPAA, GDPR, and PCI-DSS.

This role emphasizes encryption, automated scanning, logging, and collaboration with DevOps on CI/CD pipelines. The position is remote within the US, offering a competitive compensation range and comprehensive