About the role
As a Backend Security Engineer at TheWebVale, you will ensure our client software adheres to rigorous security practices. You will protect sensitive data in healthcare applications, legal platforms, and financial tools by mitigating OWASP vulnerabilities and hardening APIs.
You will work alongside our development teams to embed security verification into our two-to-three week release cycles. You will conduct threat assessments and automated scans, giving clients complete confidence in their software.
What you will do
- Conduct security code reviews and automated vulnerability scans on pull requests.
- Harden authentication flows against brute-force attacks, credential stuffing, and replay.
- Implement encryption at rest and in transit for sensitive customer and patient data.
- Configure secrets management pipelines and automated API key rotation mechanisms.
- Audit cloud infrastructure and container configurations for permission misconfigurations.
- Respond to potential security anomalies and document remediation action plans.
What you will need
- Hold 3–5 years of software engineering experience with a strong security focus.
- Demonstrate deep knowledge of the OWASP Top 10 vulnerabilities and countermeasures.
- Show practical proficiency in Node.js, TypeScript, and modern backend systems.
- Understand cryptographic protocols, SSL/TLS certificates, and JWT validation.
- Possess experience with static code analysis (SAST) and dependency auditing tools.
- Advocate for pragmatic security practices without blocking development momentum.
Nice to have
- Familiarity with compliance frameworks like ISO 27001, SOC2, or HIPAA.
- Experience conducting penetration testing or capture-the-flag security exercises.
- Knowledge of cloud security tools on AWS, Oracle Cloud, or Cloudflare.