Description

You will focus on identifying, analyzing, and fixing vulnerabilities within existing Node.js applications.

Responsibilities

• Identify, triage, and remediate vulnerabilities detected via SAST, DAST, and dependency scanning tools.
• Refactor and harden existing Node.js/Express.js APIs for security and performance.
• Update and manage dependencies to address known vulnerabilities using tooling like npm audit.
• Collaborate with Security and QA teams to validate patches and verify vulnerability resolution.
• Improve CI/CD pipelines to automate vulnerability scans and security checks.

Required Skills

• Strong proficiency in Node.js, Express.js, and JavaScript/TypeScript.
• 5+ years of professional experience.
• Deep understanding of web application vulnerabilities and mitigation strategies (XSS, CSRF, SQL Injection, etc.).
• Experience with REST APIs, OAuth2/JWT, and secure session management.
• Familiarity with Docker security, Linux hardening, and AWS cloud environments.
• Hands-on experience integrating security scans into CI/CD pipelines using Jenkins or GitHub Actions.
• Proficiency with core technologies: Node.js, TypeScript, Javascript, Express.js, APIs, AWS, DevOps, CI/CD, Github.

Key Skills

Education

Any Graduate