Software Engineer, Security Focus

About the role

A hands-on full-stack engineering role centred on fixing security vulnerabilities found in penetration tests, then moving into broader application development once that backlog is under control.

What you will do

• Take ownership of vulnerability fixes from triage through to a verified resolution
• Inspect browser session traffic to spot exposed or excessive data and turn findings into design requirements
• Feed remediation needs into technical requirements documents so fixes become lasting design rules
• Harden session management practices across the application stack
• Implement fixes in the Ruby on Rails and React codebase and in containerised AWS services
• Build and ship features across back end and front end with a security-minded approach

What they look for

• At least five years of hands-on software engineering across multiple applications and technology layers
• Working proficiency in Ruby on Rails and React
• Experience with containerised environments, AWS and Fargate
• Solid RESTful API design and security knowledge
• Hands-on experience with Pusher and AnyCable or similar real-time messaging tools
• At least five years in a security engineering or closely related role, including remediating penetration test findings