Stack Engineer Cybersecurity
About The Position
This role focuses on designing, coding, testing, and debugging applications and components that meet technical specifications, business requirements, and secure coding standards. A key aspect of the position involves remediating application security vulnerabilities identified through various scanning tools (SAST, DAST, SCA). The engineer will analyze scan findings, upgrade and patch vulnerable third-party libraries and frameworks, and apply secure coding practices to eliminate common vulnerability classes. The role also involves leveraging AI-assisted development tools to accelerate code comprehension, generate remediations, refactor code, and produce tests, while taking full ownership of the AI-generated code. Building and strengthening automated test coverage, integrating security scanning into CI/CD pipelines, and collaborating with various teams (lead engineers, Business Analysts, Information Security, application owners) are also crucial responsibilities. The engineer will translate business requirements into technical solutions, lead engineering efforts, and manage complex technical problems. Strong organizational, analytical, problem-solving, and communication skills are essential for timely resolution of security findings and clear reporting to stakeholders.
Requirements
- Undergraduate degree or equivalent experience
- 5+ years of development and testing experience in C# / .Net
- 5+ years of development experience on Microsoft SQL Server (preferred) or Oracle Database
- 5+ years Database Design/Programming (Stored Procedures/Functions)
- 5+ years of SDLC or DevOps/Agile experience
- 5+ years with Angular
- 5+ years working experience with API REST web services
- 5+ years experience with version management tools and implementing CI/CD pipelines (Git, AzureDevOps, SVN, etc.)
- 3+ years of hands-on experience remediating application security vulnerabilities, including upgrading vulnerable dependencies and resolving findings from SAST, DAST, or SCA tooling
- 2+ years Hands-on experience using AI-assisted development tools (GitHub Copilot, Claude, or similar) for code generation, code comprehension, refactoring, or test creation, with the judgment to validate and correct their output
- Excellent verbal and written communication
- Excellent organizational skills and focus on accuracy and attention to detail
- Excellent analytical, problem solving and troubleshooting abilities
Responsibilities
- Designs, codes, tests and debugs applications and components that meet all technical specifications, business requirements, and secure coding standards per assigned work items
- Remediates application security vulnerabilities identified through static (SAST), dynamic (DAST), and software composition analysis (SCA) scanning, prioritizing work by severity, exploitability, and remediation service level targets
- Analyzes scan findings to determine root cause, separate true positives from false positives, and recommend the appropriate code fix, configuration change, or compensating control
- Upgrades and patches vulnerable third-party libraries, frameworks, and end-of-life runtimes (.Net, Angular, database and reporting components), resolving the breaking changes and dependency conflicts those upgrades introduce
- Applies secure coding practices to eliminate common vulnerability classes, including injection, broken authentication and access control, insecure deserialization, weak cryptography, hard-coded secrets, and the remainder of the OWASP Top 10
- Uses AI-assisted development tools (GitHub Copilot and other enterprise-approved AI coding assistants) to accelerate comprehension of legacy code, generate candidate remediations, refactor safely, and produce unit and regression tests
- Reviews, tests, and takes full ownership of AI-generated code, confirming it is correct, secure, performant, and compliant with enterprise standards
- Builds and strengthens automated test coverage so security fixes can be delivered quickly and confidently with minimal regression risk
- Integrates security, dependency, and secrets scanning into CI/CD pipelines so vulnerabilities are surfaced and resolved early in the development lifecycle
- Works closely with lead engineers to develop the best technical design and approach for new product development and for remediation of systemic security findings
- Collaborates closely with Business Analysts, Information Security, and application owners on developing requirements and assists with estimating remediation effort
- Instills best practices for secure software development and documentation, assures designs meet requirements, and delivers high-quality work on budget and on-time
- Translates business requirements into technical solutions, recommends alternative technical and business approaches, and leads engineering efforts to meet timelines with optimal solutions
- Takes on complex technical problems that are not well-defined, decomposes them into manageable tasks, provides proper estimates, and leads/coordinates other team members to collectively deliver the end solution
- Works with the team to achieve timely resolution of all security findings, meeting or exceeding Service Level Agreements
- Reports remediation progress, backlog burn-down, and residual risk clearly to engineering and business stakeholders
- Prioritizes tasks and works concurrently on multiple tasks
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
Associate degree
