Junior Full Stack Engineer

Cortrucent Security•Berlin, NJ

54d•Onsite

About The Position

Cortrucent is seeking a Junior Full Stack Developer. We build and maintain healthcare technology platforms used by hospital systems and their patients, a clinical document exchange and eligibility application, and a companion patient-facing portal. Both handle protected health information under HIPAA and integrate with payer, clearinghouse, and provider systems. This is a hands-on role for someone early in their career who codes well and uses AI development tools well. You'll write, review, test, and ship application code, some of it drafted by AI coding assistants, all of it your responsibility to understand, verify, and defend in code review. We are explicitly not looking for someone who accepts generated code at face value. You will work closely with senior engineers, with structured onboarding and real ownership.

Requirements

1-3 years professional experience or equivalent abilities
Python proficiency, including experience with a web framework and comfort reading unfamiliar code.
SQL databases (SQL Server, PostgreSQL, MySQL, or similar): joins, aggregation, indexes, transactions, and the ability to write DDL by hand.
Experience with an ORM, and an understanding of what it's actually doing to the database underneath.
Modern JavaScript and a component-based front-end framework.
Comfort reading a large component and making a surgical change without proposing to rewrite it.
Working knowledge of HTML and CSS.
Automated testing experience in at least one language, and a genuine habit of writing tests alongside code.
Git fluency - branching, merging, resolving conflicts, and participating in pull request review.
Demonstrated use of AI coding assistants in real projects, with the judgment to recognize when generated code is wrong, insecure, over-engineered, or inconsistent with surrounding conventions.
Command-line comfort, and the ability to work through an involved local environment setup without losing a week to it.
Clear written communication — you can describe a bug, a fix, and a tradeoff in plain language, and ask a precise question when stuck.
Passion for technology & security
Strong troubleshooting and problem-solving skills
Valid driver's license and reliable transportation
Authorized to work in the U.S. without sponsorship — current or future.
Own the output. “The assistant wrote it” is not an explanation in code review.
Verify against our codebase, not against general practice.
Protect PHI absolutely. No protected health information, credentials, or client-identifying production data goes into any AI tool outside approved, contractually covered channels.
Use AI tools to learn, not to skip learning.
Willingness to work occasionally on weekends and holidays based on workload.
Availability for after-hours on-call support rotation as required.
Meets deadlines and milestones set by leadership, with proactive communication when risks or blockers arise.
Extreme attention to detail and a commitment to doing the work the right way the first time, no quick patches, no temporary fixes left in place, and no shortcuts that create future technical debt.
Client-Focused & Adaptable — Maintains client context, empathy, and urgency in every engagement; adapts quickly to changing priorities and client needs; goes above and beyond to deliver exceptional experiences.
Clear & Collaborative Communicator — Communicates clearly and confidently with clients and teammates; builds positive relationships and works well within a team.
Hands-On Doer — Balances structured process with practical, hands-on execution.
Problem Solver & Continuous Improver — Proactively identifies issues, proposes solutions, and pushes for continuous improvement; strives for excellence in every engagement.
Accountable End-to-End — Takes ownership of tasks from start to finish — including thorough testing, validation, and documentation — and drives results with minimal supervision.
Disciplined in Delivery & Detail — Consistently meets deadlines and milestones with proactive communication when risks or blockers arise; commits to doing the work the right way the first time — no quick patches, no temporary fixes left in place, and no shortcuts that create future technical debt.
Team Player — Supports teammates and contributes to a positive, collaborative culture.

Nice To Haves

Experience in a HIPAA-regulated or otherwise compliance-heavy engineering environment.
Familiarity with healthcare concepts — eligibility, charity care, medical assistance programs, appeals, consent and signature workflows, or revenue cycle generally.
Experience with containerized local development.
Exposure to OAuth2 / enterprise SSO and role-based access control.
Experience working within a CI/CD pipeline and automated quality gates.
Certifications like Security+, ISC2 CC, CSSLP, DevSecOps Certs
Consulting or Service Provider background.
Familiarity with compliance & security frameworks (SOC 2, HIPAA, NIST, ISO, HITRUST, etc.)

Responsibilities

Build and modify API endpoints and backend service logic in Python.
Write and modify front-end components and screens, including work in large existing files.
Write and tune SQL and author schema changes by hand.
Write tests alongside your code and treat test coverage as part of the work rather than an afterthought.
Reproduce and fix defects reported by clients and internal QA.
Apply role-based authorization correctly on everything you touch — getting this wrong is a security defect, not a style issue.
Handle PHI correctly in code: logging, exception handling, audit trails, file paths, and error messages.
Use AI coding assistants to move faster, then review, correct, and test the output before it reaches a pull request.
Document what you build and write down the sharp edges nobody has captured yet.
Own features end to end (API, front end, database, and tests) from ticket to production.
Ensure pull requests submitted rarely bounce for authorization gaps, PHI handling mistakes, or missing test coverage.
Ensure reviewers are checking design decisions, not fundamentals.
Fix defects so they stay fixed, with reproductions being reliable and changes including tests that prevent regression.
Ensure client-reported defect volume in areas owned trends down, not up.
Ensure AI-assisted output submitted is indistinguishable in quality from hand-written code because it was reviewed and corrected before anyone else saw it.