Description

You will harden and secure Node.js applications by identifying vulnerabilities, refactoring APIs, and automating security checks in CI/CD pipelines.

This role is remote.

Responsibilities

• Identify, triage, and remediate vulnerabilities from SAST, DAST, and dependency scans.
• Refactor and harden Node.js/Express.js APIs for security and performance.
• Manage dependencies to address known vulnerabilities using tools like npm audit.
• Improve CI/CD pipelines to automate security scans and vulnerability checks.
• Document security changes and maintain audit trails for post-fix validation.

Required Skills

• Strong proficiency in Node.js, Express.js, and JavaScript/TypeScript.
• Experience with REST APIs, OAuth2/JWT, and secure session management.
• Deep understanding of web application vulnerabilities (e.g., SQL Injection, XSS) and mitigation.
• Familiarity with Docker security, Linux hardening, and AWS cloud environments.
• Hands-on experience integrating security scans into CI/CD pipelines (Jenkins, GitHub Actions).
• Experience with TypeScript, NestJS, Kafka, Mongo, or Oracle Rdbms.
• Proficiency using Jest for testing.
• 5+ years of experience.

Preferred Skills

• Exposure to microservices architecture and API gateway security.
• Familiarity with DevSecOps practices.

Key Skills

Education

Any Gradute