Description

You will identify, analyze, and fix vulnerabilities within existing Node.js applications while hardening APIs and CI/CD pipelines.

This role is hybrid.

Responsibilities

• Identify, triage, and remediate vulnerabilities detected via SAST, DAST, and dependency scanning tools.
• Refactor and harden existing Node.js/Express.js APIs for security and performance.
• Update and manage dependencies to address known vulnerabilities using tooling like npm audit.
• Collaborate with Security and QA teams to validate patches and verify vulnerability resolution.
• Improve CI/CD pipelines to automate vulnerability scans and security checks.

Required Skills

• Strong proficiency in Node.js, Express.js, JavaScript, and TypeScript.
• 5+ years of professional experience with web application development.
• Deep understanding of web application vulnerabilities and mitigation strategies (XSS, CSRF, SQL Injection, etc.).
• Experience with REST APIs, OAuth2/JWT, and secure session management.
• Familiarity with Docker security, Linux hardening, and AWS cloud environments.
• Hands-on experience integrating security scans into CI/CD pipelines using Jenkins or GitHub Actions.

Preferred Skills

• Experience with automated security tooling integration in DevOps workflows.

Key Skills

Education

Any Graduate