Stack Engineer Cybersecurity

National Computer Systems Inc; Piscataway Township (NJ); On-site; USD 130,000 - 170,000; Full time

Job summary

National Computer Systems Inc. in New Jersey seeks a Stack Engineer Cybersecurity to design, code, test, and secure software across the stack. You will apply secure coding practices, remediate vulnerabilities, and integrate security testing into CI/CD pipelines.

The role requires 5+ years in C#/.Net development, SQL Server or Oracle, Angular, REST APIs, and experience with SDLC/Agile. Strong communication and hands-on AI-assisted development skills are essential.

Qualifications

• Undergraduate degree or equivalent experience.
• 5+ years of development and testing experience in C# / .Net.
• 5+ years of development experience on Microsoft SQL Server (preferred) or Oracle Database
• 5+ years Database Design/Programming (Stored Procedures/Functions)
• 5+ years of SDLC or DevOps/Agile experience
• 5+ years with Angular
• 5+ years working experience with API REST web services
• 5+ years experience with version management tools and implementing CI/CD pipelines (Git, AzureDevOps, SVN, etc.)
• 3+ years of hands‑on experience remediating application security vulnerabilities, including upgrading vulnerable dependencies and resolving findings from SAST, DAST, or SCA tooling
• 2+ years Hands‑on experience using AI‑assisted development tools (GitHub Copilot, Claude, or similar) for code generation, code comprehension, refactoring, or test creation, with the judgment to validate and correct their output
• Excellent verbal and written communication

Responsibilities

• Designs, codes, tests and debugs applications and components that meet technical specifications, business requirements, and secure coding standards per assigned work items
• Remediates application security vulnerabilities identified through static (SAST), dynamic (DAST), and software composition analysis (SCA) scanning, prioritizing work by severity, exploitability, and remediation SLAs
• Analyzes scan findings to determine root cause, separate true positives from false positives, and recommend the appropriate code fix, configuration change, compensating control, or risk acceptance path
• Upgrades and patches vulnerable third‑party libraries, frameworks, and end‑of‑life runtimes (.Net, Angular, database and reporting components), resolving breaking changes and dependency conflicts
• Applies secure coding practices to eliminate common vulnerability classes, including injection, broken authentication and access control, insecure deserialization, weak cryptography, hard‑coded secrets, and OWASP Top 10
• Uses AI‑assisted development tools (GitHub Copilot and other enterprise‑approved AI coding assistants) to accelerate comprehension of legacy code, generate candidate remediations, refactor safely, and produce unit and regression tests
• Reviews, tests, and takes full ownership of AI‑generated code, confirming it is correct, secure, performant, and compliant with enterprise standards
• Builds and strengthens automated test coverage so security fixes can be delivered quickly with minimal regression risk
• Integrates security, dependency, and secrets scanning into CI/CD pipelines so vulnerabilities are surfaced and resolved early in the development lifecycle
• Work closely with lead engineers to develop the best technical design and approach for new product development and remediation of systemic security findings
• Collaborates with Business Analysts, Information Security, and application owners on developing requirements and assists with estimating remediation effort
• Instill best practices for secure software development and documentation, assure designs meet requirements, and deliver high‑quality work on budget and on‑time.
• Translate business requirements into technical solutions, recommend alternative technical and business approaches, and lead engineering efforts to meet timelines with optimal solutions
• Ability to take on a complex technical problem that is not well‑defined, decompose into manageable tasks, provide proper estimates, and lead/coordinate other team members to collectively deliver the end solution
• Excellent organizational skills and focus on accuracy and attention to detail.
• Excellent analytical, problem solving and troubleshooting abilities
• Work with team to achieve timely resolution of all security findings, meeting or exceeding Service Level Agreements
• Reports remediation progress, backlog burn-down, and residual risk clearly to engineering and business stakeholders
• Ability to prioritize tasks and work concurrently on multiple tasks

Skills

C#/.Net

Angular

API REST

CI/CD pipelines

Version control

Security testing

Problem solving

Communication

Education

Undergraduate degree or equivalent experience

Tools

Git

Azure DevOps

SVN

SAST/DAST/SCA tools

Job description

Stack Engineer Cybersecurity

• Undergraduate degree or equivalent experience
• 5+ years of development and testing experience in C# / .Net
• 5+ years of development experience on Microsoft SQL Server (preferred) or Oracle Database
• 5+ years Database Design/Programming (Stored Procedures/Functions)
• 5+ years of SDLC or DevOps/Agile experience
• 5+ years with Angular
• 5+ years working experience with API REST web services
• 5+ years experience with version management tools and implementing CI/CD pipelines (Git, AzureDevOps, SVN, etc.)
• 3+ years of hands‑on experience remediating application security vulnerabilities, including upgrading vulnerable dependencies and resolving findings from SAST, DAST, or SCA tooling
• 2+ years Hands‑on experience using AI‑assisted development tools (GitHub Copilot, Claude, or similar) for code generation, code comprehension, refactoring, or test creation, with the judgment to validate and correct their output
• Excellent verbal and written communication

Desired Skills:

• Designs, codes, tests and debugs applications and components that meet all technical specifications, business requirements, and secure coding standards per assigned work items
• Remediates application security vulnerabilities identified through static (SAST), dynamic (DAST), and software composition analysis (SCA) scanning, prioritizing work by severity, exploitability, and remediation service level targets
• Analyzes scan findings to determine root cause, separate true positives from false positives, and recommend the appropriate code fix, configuration change, compensating control, or risk acceptance path
• Upgrades and patches vulnerable third‑party libraries, frameworks, and end‑of‑life runtimes (.Net, Angular, database and reporting components), resolving the breaking changes and dependency conflicts those upgrades introduce
• Applies secure coding practices to eliminate common vulnerability classes, including injection, broken authentication and access control, insecure deserialization, weak cryptography, hard‑coded secrets, and the remainder of the OWASP Top 10
• Uses AI‑assisted development tools (GitHub Copilot and other enterprise‑approved AI coding assistants) to accelerate comprehension of legacy code, generate candidate remediations, refactor safely, and produce unit and regression tests
• Reviews, tests, and takes full ownership of AI‑generated code, confirming it is correct, secure, performant, and compliant with enterprise standards, so that closing one finding never introduces a new one
• Builds and strengthens automated test coverage so security fixes can be delivered quickly and confidently with minimal regression risk
• Integrates security, dependency, and secrets scanning into CI/CD pipelines so vulnerabilities are surfaced and resolved early in the development lifecycle
• Work closely with lead engineers to develop the best technical design and approach for new product development and for remediation of systemic security findings
• Collaborates closely with Business Analysts, Information Security, and application owners on developing requirements and assists with estimating remediation effort
• Instill best practices for secure software development and documentation, assure designs meet requirements, and deliver high-quality work on budget and on‑time.
• Translate business requirements into technical solutions, recommend alternative technical and business approaches, and lead engineering efforts to meet timelines with optimal solutions
• Ability to take on a complex technical problem that is not well‑defined, decompose into manageable tasks, provide proper estimates, and lead/coordinate other team members to collectively deliver the end solution
• Excellent organizational skills and focus on accuracy and attention to detail.
• Excellent analytical, problem solving and troubleshooting abilities
• Work with team to achieve timely resolution of all security findings, meeting or exceeding Service Level Agreements
• Reports remediation progress, backlog burn-down, and residual risk clearly to engineering and business stakeholders
• Ability to prioritize tasks and work concurrently on multiple tasks