Backend Security Engineer
You will harden backend infrastructure, enforce encryption standards, and conduct security reviews to protect client applications from vulnerabilities.
What you'll work with.
As a Backend Security Engineer at TheWebVale, you will ensure our client software adheres to rigorous security practices. You will protect sensitive data in healthcare applications, legal platforms, and financial tools by mitigating OWASP vulnerabilities and hardening APIs. You will work alongside our development teams to embed security verification into our two-to-three week release cycles. You will conduct threat assessments and automated scans, giving clients complete confidence in their software.
Your day to day.
6 things, one at a time. Keep scrolling.
Conduct security code reviews and automated vulnerability scans on pull requests.
Harden authentication flows against brute-force attacks, credential stuffing, and replay.
Implement encryption at rest and in transit for sensitive customer and patient data.
Configure secrets management pipelines and automated API key rotation mechanisms.
Audit cloud infrastructure and container configurations for permission misconfigurations.
Respond to potential security anomalies and document remediation action plans.
What we look for.
6 things, one at a time. Keep scrolling.
Hold 3–5 years of software engineering experience with a strong security focus.
Demonstrate deep knowledge of the OWASP Top 10 vulnerabilities and countermeasures.
Show practical proficiency in Node.js, TypeScript, and modern backend systems.
Understand cryptographic protocols, SSL/TLS certificates, and JWT validation.
Possess experience with static code analysis (SAST) and dependency auditing tools.
Advocate for pragmatic security practices without blocking development momentum.
What you get.
Three steps, no tricks.
- 1
Intro chat
A short call about what you want to work on and how you like to work.
- 2
Work review
Walk us through projects, code or designs you are proud of.
- 3
Paid task
A small paid task or pairing session, so both sides see the fit.
Apply for Backend Security Engineer .
Tell us about your work. We reply to every application, usually within a few days.