Description

You will focus on hardening and securing Node.js applications.

Responsibilities

• Identify, triage, and remediate vulnerabilities found by SAST, DAST, and dependency scanning tools.
• Refactor and harden existing Node.js/Express.js APIs for security and performance.
• Update and manage dependencies to address known vulnerabilities using tools like npm audit.
• Improve CI/CD pipelines to automate security scans and vulnerability checks.
• Document security changes and maintain audit trails for post-fix validation.

Required Skills

• Strong proficiency in Node.js, Express.js, and JavaScript/TypeScript.
• Experience with REST APIs, OAuth2/JWT, and secure session management.
• Deep understanding of web application vulnerabilities and mitigation strategies (e.g., SQL Injection, XSS).
• Familiarity with Docker security, Linux hardening, and AWS cloud environments.
• Hands-on experience integrating security scans into CI/CD pipelines (Jenkins, GitHub Actions).
• Experience with Typescript, Nestjs, Kafka, Mongo, or Oracle Rdbms.
• Proficiency using tools like Jest for testing.

Preferred Skills

• Exposure to microservices architecture and API gateway security.
• Familiarity with DevSecOps practices.

Key Skills

Education

Any Gradute