Position Overview
We are seeking a hands-on Software Engineer with a strong application security background to support an initiative focused on identifying and remediating vulnerabilities across our applications.
The initial focus will be on the Perks application, with the opportunity to support additional applications over time.
This is not a traditional Security Engineer position. The ideal candidate is a strong software engineer who has served as a security SME within development teams and has hands-on experience taking identified vulnerabilities through remediation.
The engineer will receive findings generated through application and code security scanning, determine the appropriate remediation approach, implement fixes, and validate those changes.
The role will also require recent experience using AI-assisted development tools, with Claude Code being the primary tool currently used by the team.
Responsibilities
- Review vulnerability findings generated through application and code scanning tools.
- Analyze security findings and determine the appropriate technical remediation approach.
- Modify application code to remediate identified security vulnerabilities.
- Address issues involving:
- Dependency and package vulnerabilities
- API vulnerabilities
- Missing or flawed authentication and authorization
- Secrets or credentials embedded within application or service code
- Cloud and application configuration vulnerabilities
- Apply patches and other application security fixes based on identified findings.
- Work primarily within the backend of the application while supporting some UI-related remediation as needed.
- Partner with development and security teams as the security-focused SME for application remediation efforts.
- Validate that identified vulnerabilities have been successfully remediated.
- Use AI coding assistants as part of the software development and security-remediation workflow.
- Support applications deployed within an Azure environment.
Required Qualifications
- Strong hands-on software engineering experience, particularly with backend application development.
- Strong hands-on experience with TypeScript.
- Recent experience identifying and remediating application security vulnerabilities.
- Experience working as a security SME within a software development or application team.
- Hands-on experience fixing security issues involving authentication, authorization, APIs, dependencies/packages, secrets, and application configurations.
- Experience working from results generated by code scanning, application security scanning, or vulnerability management tools.
- Experience with Wiz or comparable application/code security scanning tools.
- Recent hands-on experience using AI-assisted development tools as part of the software development lifecycle.
- Experience using Claude Code or comparable AI coding assistants.
- Ability to understand an identified vulnerability, determine a remediation plan, and personally implement the required fix.
Preferred Qualifications
- Experience with Azure-hosted applications.
- Experience with mobile applications.
- Experience performing security remediation across both backend services and user interfaces.
- Experience supporting vulnerability remediation across multiple applications or codebases.